Skip to content
OpenAdvisories

Vendor

Saurus

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    Saurus CMS Unauthenticated Open Redirect via logout url parameter

    Saurus CMS Community Edition contains an unauthenticated open redirect vulnerability in the logout handling code in classes/port.inc.php, where the url parameter supplied via GET or POST is passed directly to the Location header without domain allowlist, sche…