Description
Open redirect vulnerability in c.php in CMS WebManager-Pro 8.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.
References
- 8438 third-party-advisory
- 20100902 Vulnerabilities in CMS WebManager-Pro mailing-list
- http://packetstormsecurity.org/1009-exploits/webmanagerpro-sql.txt
- http://websecurity.com.ua/4146/