Unscored CVE-2014-5127 EUVD-2014-5025GHSA-795j-xvg2-56j4

Open redirect vulnerability in Innovative Interfaces Encore Discovery Solution 4.3 allows remote attackers to redirect users to arbitrary w…

Published Aug 29, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Open redirect vulnerability in Innovative Interfaces Encore Discovery Solution 4.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in an unspecified parameter.

References

encore-discovery-cve20145127-open-redirect(95568) vdb-entry
http://packetstormsecurity.com/files/128013/Encore-Discovery-Solution-4.3-Open-Redirect-Session-Token-In-URL.html
20140827 Encore Discovery Solution Multiple Vulnerability Disclosure mailing-list
69427 vdb-entry