CVE-2012-4032
medium · 5.8A public exploit / detection template exists
Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →
Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in ReturnUrl to Default.aspx.
5.8
CVSS
10.3%
EPSS (exploit prob.)
95th
EPSS percentile
2012-07-17
Published
AV:N/AC:M/Au:N/C:P/I:P/A:N
Weaknesses
CWE-20
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| websitepanel | websitepanel | <= 1.2.1 |
| websitepanel | websitepanel | 1.0.0 |
| websitepanel | websitepanel | 1.0.1 |
| websitepanel | websitepanel | 1.0.2 |
| websitepanel | websitepanel | 1.1.0 |
| websitepanel | websitepanel | 1.1.2 |
| websitepanel | websitepanel | 1.2.0 |
Check a specific version with /api/v1/cve/match.
References
- http://osvdb.org/83689
- http://packetstormsecurity.org/files/114541/WebsitePanel-CMS-Open-Redirect.html
- http://secunia.com/advisories/49813
- http://websitepanel.codeplex.com/workitem/224
- http://www.securityfocus.com/bid/54346
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76803
- http://osvdb.org/83689
- http://packetstormsecurity.org/files/114541/WebsitePanel-CMS-Open-Redirect.html
- http://secunia.com/advisories/49813
- http://websitepanel.codeplex.com/workitem/224
- http://www.securityfocus.com/bid/54346
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76803
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2012-4032