medium6.1
CVE-2017-5614
Open redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors i…
Impact
Open redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the (1) success or (2) failure parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cpanel | Cpanel | from 11.54.0.0 before 11.54.0.36 from 55.9999.61 before 56.0.43 from 57.9999.48 before 58.0.43 from 59.9999.58 before 60.0.35 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2017/01/28/8
- http://www.securityfocus.com/bid/95870
- https://news.cpanel.com/tsr-2017-0001-full-disclosure/
- http://www.openwall.com/lists/oss-security/2017/01/28/8
- http://www.securityfocus.com/bid/95870
- https://news.cpanel.com/tsr-2017-0001-full-disclosure/