Evil-DB LogoEvil-DB
← All CVEs

CVE-2010-1586

medium · 4.3

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the RedirectUrl parameter.

4.3
CVSS
10.3%
EPSS (exploit prob.)
95th
EPSS percentile
2010-04-28
Published

AV:N/AC:M/Au:N/C:N/I:P/A:N

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
hpsystem_management_homepage2.0.0
hpsystem_management_homepage2.0.1
hpsystem_management_homepage2.0.2
hpsystem_management_homepage2.1
hpsystem_management_homepage2.1.0-103
hpsystem_management_homepage2.1.0-103(a)
hpsystem_management_homepage2.1.0-109
hpsystem_management_homepage2.1.0-118
hpsystem_management_homepage2.1.1
hpsystem_management_homepage2.1.2
hpsystem_management_homepage2.1.2-127
hpsystem_management_homepage2.1.3
hpsystem_management_homepage2.1.3.132
hpsystem_management_homepage2.1.4
hpsystem_management_homepage2.1.5
hpsystem_management_homepage2.1.5-146
hpsystem_management_homepage2.1.6
hpsystem_management_homepage2.1.6-156
hpsystem_management_homepage2.1.7
hpsystem_management_homepage2.1.7-168
hpsystem_management_homepage2.1.8
hpsystem_management_homepage2.1.8-177
hpsystem_management_homepage2.1.9
hpsystem_management_homepage2.1.9-178
hpsystem_management_homepage2.1.10-186
hpsystem_management_homepage2.1.11-197
hpsystem_management_homepage2.1.12-118
hpsystem_management_homepage2.1.12-200
hpsystem_management_homepage2.2.6
hpsystem_management_homepage2.2.8

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2010-1586