Unscored CVE-2008-4162 EUVD-2008-4145GHSA-v43w-xvv9-h2cv

Open redirect vulnerability in admin/auth.php in NooMS 1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phi…

Published Sep 22, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Open redirect vulnerability in admin/auth.php in NooMS 1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the g_site_url parameter.

References

nooms-auth-xss(45075) vdb-entry
4289 third-party-advisory
20080911 Nooms 1.1 mailing-list