CVE-2007-5695 Open redirect vulnerability in command.php in SiteBar 3.3.8 allows remote attackers to redirect users to arbitrary web sites via a URL in the forward parameter in a Log In action.
MediumCVSS 6.4
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Open redirect vulnerability in command.php in SiteBar 3.3.8 allows remote attackers to redirect users to arbitrary web sites via a URL in the forward parameter in a Log In action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sitebar | = 3.3.8 | No fix listed |
References
- 41581 vdb-entry
- 27503 third-party-advisory
- 28008 third-party-advisory
- 3318 third-party-advisory
- teamforge.net patch
- DSA-1423 vendor-advisory
- GLSA-200711-05 vendor-advisory
- 20071018 Serious holes affecting SiteBar 3.3.8 mailing-list
- 26126 exploit patch vdb-entry
- ADV-2007-3768 vdb-entry