1. CVE-Search
  2. CVE-2014-2230
ID CVE-2014-2230
Summary Open redirect vulnerability in the header function in adclick.php in OpenX 2.8.10 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) dest parameter to adclick.php or (2) _maxdest parameter to ck.php. <a href = "http://cwe.mitre.org/data/definitions/601.html"> CWE-601: URL Redirection to Untrusted Site ('Open Redirect') </a>
References
Vulnerable Configurations
  • cpe:2.3:a:openx:openx:2.8:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.8:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.8.1:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.8.2:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.8.2:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.8.3:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.8.3:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.8.4:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.8.4:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.8.5:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.8.5:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.8.6:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.8.6:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.8.7:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.8.7:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.8.8:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.8.8:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.8.9:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.8.9:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.4:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.4.4:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.4.4:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.4.5:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.4.5:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.4.6:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.4.6:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.4.7:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.4.7:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.4.8:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.4.8:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.4.9:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.4.9:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.4.10:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.4.10:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.4.11:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.4.11:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.6.3:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.6.4:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.6.4:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.6.5:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.7.29:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.7.29:*:*:*:*:*:*:*
  • cpe:2.3:a:openx:openx:2.8.10:*:*:*:*:*:*:*
    cpe:2.3:a:openx:openx:2.8.10:*:*:*:*:*:*:*
CVSS
Base: 5.8 (as of 29-08-2017 - 01:34)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL NONE
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:P/A:N
refmap via4
fulldisc 20141016 CVE-2014-2230 - OpenX Open Redirect Vulnerability
misc
xf openx-cve20142230-open-redirect(97621)
Last major update 29-08-2017 - 01:34
Published 23-10-2014 - 14:55
Last modified 29-08-2017 - 01:34
Back to Top