| ID |
CVE-2015-1060
|
| Summary |
Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header. <a href="http://cwe.mitre.org/data/definitions/601.html">CWE-601: URL Redirection to Untrusted Site ('Open Redirect')</a> |
| References |
|
| Vulnerable Configurations |
|
| CVSS |
| Base: | 5.8 (as of 08-09-2017 - 01:29) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-Other |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
MEDIUM |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| PARTIAL |
PARTIAL |
NONE |
|
| cvss-vector
via4
|
AV:N/AC:M/Au:N/C:P/I:P/A:N
|
| refmap
via4
|
| exploit-db | 35710 | | misc | | | osvdb | 116721 | | xf | adaptcms-referer-open-redirect(99618) |
|
| Last major update |
08-09-2017 - 01:29 |
| Published |
16-01-2015 - 15:59 |
| Last modified |
08-09-2017 - 01:29 |
