Description

Open redirect vulnerability in Vanilla Forums before 2.0.17.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the Target parameter to an unspecified component, a different vulnerability than CVE-2011-0526.

Remediation

References

CVE-2011-0908

Related Vulnerabilities

WordPress Plugin Calendar Event Multi View Security Bypass (1.4.13)

WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.17)

Drupal Improper Input Validation Vulnerability (CVE-2016-9452)

Apache HTTP Server Integer Overflow or Wraparound Vulnerability (CVE-2022-22721)

Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-2370)

Severity

Medium

Classification

CVE-2011-0908 CWE-20

Tags

Missing Update Known Vulnerabilities