ID CVE-2015-5354
Type cve
Reporter NVD
Modified 2016-12-07T13:16:37
Description
Open redirect vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to admin/nos/login.
{"id": "CVE-2015-5354", "bulletinFamily": "NVD", "title": "CVE-2015-5354", "description": "Open redirect vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to admin/nos/login.", "published": "2015-07-01T12:59:01", "modified": "2016-12-07T13:16:37", "cvss": {"score": 5.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:NONE/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5354", "reporter": "NVD", "references": ["https://www.exploit-db.com/exploits/37439/", "http://packetstormsecurity.com/files/132478/Novius-OS-5.0.1-elche-XSS-LFI-Open-Redirect.html", "http://www.securityfocus.com/archive/1/archive/1/535876/100/0/threaded"], "cvelist": ["CVE-2015-5354"], "type": "cve", "lastseen": "2017-04-18T15:57:31", "history": [{"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:novius-os:novius_os:5.0.1"], "cvelist": ["CVE-2015-5354"], "cvss": {"score": 5.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:NONE/"}, "description": "Open redirect vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to admin/nos/login.", "edition": 1, "hash": "05616fa74b0c2e93274fc199e32e323954beabd2776c8f9f520ba63c2053d365", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "56765472680401499c79732468ba4340", "key": "objectVersion"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "f70f9fac22ac5e1cd50de0dc4e4c40a6", "key": "published"}, {"hash": "e76c824400a957140015519de7b7d0e9", "key": "description"}, {"hash": "306b9825a5075835e213afb3224bf738", "key": "references"}, {"hash": "6371324ef027f56d5dec08bbb74c9112", "key": "cpe"}, {"hash": "aa48a6bdcab91a600eca490863982fbd", "key": "cvss"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "306444e9f52eaec33ba781a3a3f03f6b", "key": "title"}, {"hash": "8437efffa0a412b74eee060896abb75a", "key": "href"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "00013e8a6f087ede2936ab2c9e0dd233", "key": "cvelist"}, {"hash": "0a34fd2e3b1438a2996f8b36602dd615", "key": "modified"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5354", "id": "CVE-2015-5354", "lastseen": "2016-09-03T22:52:15", "modified": "2015-07-02T13:56:59", "objectVersion": "1.2", "published": "2015-07-01T12:59:01", "references": ["http://packetstormsecurity.com/files/132478/Novius-OS-5.0.1-elche-XSS-LFI-Open-Redirect.html", "http://www.securityfocus.com/archive/1/archive/1/535876/100/0/threaded"], "reporter": "NVD", "scanner": [], "title": "CVE-2015-5354", "type": "cve", "viewCount": 0}, "differentElements": ["references", "modified"], "edition": 1, "lastseen": "2016-09-03T22:52:15"}], "edition": 2, "hashmap": [{"key": "assessment", "hash": "6d3f4796275bb54c21a33b82f399cc6d"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "6371324ef027f56d5dec08bbb74c9112"}, {"key": "cvelist", "hash": "00013e8a6f087ede2936ab2c9e0dd233"}, {"key": "cvss", "hash": "aa48a6bdcab91a600eca490863982fbd"}, {"key": "description", "hash": "e76c824400a957140015519de7b7d0e9"}, {"key": "href", "hash": "8437efffa0a412b74eee060896abb75a"}, {"key": "modified", "hash": "ce020d6415eccb66d9831461ee4c128e"}, {"key": "objectVersion", "hash": "56765472680401499c79732468ba4340"}, {"key": "published", "hash": "f70f9fac22ac5e1cd50de0dc4e4c40a6"}, {"key": "references", "hash": "35567710acdc523a42e5e721ff8b6067"}, {"key": "reporter", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "scanner", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "title", "hash": "306444e9f52eaec33ba781a3a3f03f6b"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "629211da6b611a7c18d4dc18cbaac7e0d832fab0dc2959a3ac298c1c7cd67347", "viewCount": 0, "objectVersion": "1.2", "cpe": ["cpe:/a:novius-os:novius_os:5.0.1"], "assessment": {"href": "", "name": "", "system": ""}, "scanner": [], "enchantments": {"vulnersScore": 5.0}}
{"result": {"exploitdb": [{"id": "EDB-ID:37439", "type": "exploitdb", "title": "Novius 5.0.1 - Multiple Vulnerabilities", "description": "Novius 5.0.1 - Multiple Vulnerabilities. CVE-2015-5353,CVE-2015-5354. Webapps exploit for php platform", "published": "2015-06-30T00:00:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://www.exploit-db.com/exploits/37439/", "cvelist": ["CVE-2015-5354", "CVE-2015-5353"], "lastseen": "2016-02-04T05:50:13"}], "packetstorm": [{"id": "PACKETSTORM:132478", "type": "packetstorm", "title": "Novius OS 5.0.1-elche XSS / LFI / Open Redirect", "description": "", "published": "2015-06-29T00:00:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://packetstormsecurity.com/files/132478/Novius-OS-5.0.1-elche-XSS-LFI-Open-Redirect.html", "cvelist": ["CVE-2015-5354", "CVE-2015-5353"], "lastseen": "2016-12-05T22:19:15"}]}}