Impress CMS version 1.3.7 suffers from an open redirection vulnerability.
3dad6200960f37651aa5d9d1feb60b462e9e5960d8e2352c110a91a4de811490#Affected Vendor: http://www.impresscms.org/
#Date: 03/09/2014
#Discovered by: JoeV
#Type of vulnerability: URL Redirection
#Tested on: Windows 7
#Version : 1.3.7
#Description: Impress CMS is susceptible to URL direction attack. When
a malicious user sends a payload as
"http://localhost/user.php?xoops_redirect="maliciouslink"", user
enters the credentials and gets redirected to the malicious link.
Payload - http://localhost/user.php?xoops_redirect="malicious link or
port number"
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed