Vulnerability Description
Open redirect vulnerability in Vanilla Forums before 2.0.17.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the Target parameter to an unspecified component, a different vulnerability than CVE-2011-0526.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Vanillaforums | Vanilla | <= 2.0.17.5 |
Related Weaknesses (CWE)
References
- http://www.vanillaforums.org/discussion/comment/134729/#Comment_134729
- http://www.vanillaforums.org/discussion/comment/134729/#Comment_134729
FAQ
What is CVE-2011-0908?
CVE-2011-0908 is a vulnerability with a CVSS score of 5.8 (MEDIUM). Open redirect vulnerability in Vanilla Forums before 2.0.17.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the Target parameter to an unsp...
How severe is CVE-2011-0908?
CVE-2011-0908 has been rated MEDIUM with a CVSS base score of 5.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-0908?
Check the references section above for vendor advisories and patch information. Affected products include: Vanillaforums Vanilla.