Skip to content
OpenAdvisories
Unscored CVE-2012-5338 EUVD-2012-5261GHSA-454c-gxv7-hhvg

Open redirect vulnerability in JForum 2.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks v…

Published Sep 23, 2013 · Updated Sep 16, 2024 · Assigned by mitre

Description

Open redirect vulnerability in JForum 2.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the returnPath parameter in a validateLogin action to jforum.page.

References