CVE-2014-9180

2014-12-0216:00:00

mitre

www.cve.org

vulnerability

open redirect

eleanor cms

phishing attacks

AI Score

6.6

Confidence

High

EPSS

0.002

Percentile

65.0%

JSON

Open redirect vulnerability in go.php in Eleanor CMS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the QUERY_STRING.

References

packetstormsecurity.com/files/129087/Eleanor-CMS-Open-Redirect.html