medium5.8
CVE-2014-2230
Open redirect vulnerability in the header function in adclick.php in OpenX 2.8.10 and earlier allows remote attackers to redirect users to arbitrary web sites …
Impact
Open redirect vulnerability in the header function in adclick.php in OpenX 2.8.10 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) dest parameter to adclick.php or (2) _maxdest parameter to ck.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openx | Openx | through 2.8.10 Versions 2.8, 2.8.1, 2.8.2, 2.8.3, 2.8.4 |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/128718/OpenX-2.8.10-Open-Redirect.html
- http://seclists.org/fulldisclosure/2014/Oct/72
- http://www.tetraph.com/blog/cves/cve-2014-2230-openx-open-redirect-vulnerability-2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97621
- http://packetstormsecurity.com/files/128718/OpenX-2.8.10-Open-Redirect.html
- http://seclists.org/fulldisclosure/2014/Oct/72
- http://www.tetraph.com/blog/cves/cve-2014-2230-openx-open-redirect-vulnerability-2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97621