CVE-2007-0921 - Portal Search allows remote attackers to redirect a URL to an arbitrary web site by placing the URL

CVE-2007-0921

Summary

Portal Search allows remote attackers to redirect a URL to an arbitrary web site by placing the URL in the query string to the top-level URI.

References

Vulnerable Configurations

cpe:2.3:a:radical_technologies:portal_search:*:*:*:*:*:*:*:*
cpe:2.3:a:radical_technologies:portal_search:*:*:*:*:*:*:*:*

CVSS

CWE

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:C/A:C

refmap via4

bid	22533
bugtraq	20070212 Radical Technologies - Portal Search- multiple XSS issue
osvdb	33713
sreason	2247
xf	portalsearch-frame-url-spoofing(32460)

Last major update

16-10-2018 - 16:35

Published

14-02-2007 - 11:28

Last modified

16-10-2018 - 16:35