NetSight
IP …
medium5.8Public exploit code

CVE-2012-4032

Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phish…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in ReturnUrl to Default.aspx.

Affected products

VendorProductAffected versions
WebsitepanelWebsitepanel
through 1.2.1
Versions 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.2

Weakness classification

CWE-20

References