CVE-2008-7269 Open redirect vulnerability in api.php in SiteEngine 5.x allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter....
MediumCVSS 5.8
EPSS 8.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Open redirect vulnerability in api.php in SiteEngine 5.x allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter in a logout action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| boka siteengine | = 5.0 | No fix listed |
References
- 20081023 SiteEngine 5.x Multiple Remote Vulnerabilities mailing-list
- 31888 vdb-entry
- 6823 exploit