Lucene search

K
cve[email protected]CVE-2008-2268
HistoryMay 16, 2008 - 12:54 p.m.

CVE-2008-2268

2008-05-1612:54:00
web.nvd.nist.gov
19
cve-2008-2268
open redirect
mjguest
user-assisted
remote attackers
phishing
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.6 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.9%

Open redirect vulnerability in interface/redirect.htm.php in Mjguest 6.7 GT Rev.01 allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the goto parameter in a redirect action to mjguest.php. NOTE: this is user-assisted because there is a delay and a notification before redirection occurs.

Affected configurations

NVD
Node
mdsjackmjguestMatch6.7_gt_rev1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.6 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.9%

Related for CVE-2008-2268