CVE-2011-5252

Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1.2.42, and 1.3.x before 1.3.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the ReturnUrl parameter...

CVE-2011-5252

Open redirect in Orchard: vulnerable in Users/Account/LogOff where ReturnUrl parameter can redirect to arbitrary sites. Affected: Orchard 1.0.x < 1.0.21, 1.1.x < 1.1.31, 1.2.x < 1.2.42, 1.3.x

Open Redirection Vulnerability in Orchard 1.3.9

Information -------------------- Name : Open Redirection Vulnerability in Orchard Software : Orchard 1.3.9 and below. Vendor Homepage : http://orchardproject.net Vulnerability Type : Open Redirection Severity : Medium Researcher : Mesut Timur Advisory Reference : NS-12-002 Description...

Orchard 1.3.9 - ReturnUrl Open Redirection

Orchard 1.3.9 - ReturnUrl Open Redirection source: https://www.securityfocus.com/bid/51260/info Orchard is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks are possible...

Orchard 1.3.9 - 'ReturnUrl' Open Redirection

source: https://www.securityfocus.com/bid/51260/info Orchard is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks are possible. Orchard 1.3.9 is vulnerable; other version...

Orchard 1.3.9 Open Redirection

Information -------------------- Name : Open Redirection Vulnerability in Orchard Software : Orchard 1.3.9 and below. Vendor Homepage : http://orchardproject.net Vulnerability Type : Open Redirection Severity : Medium Researcher : Mesut Timur Advisory Reference : NS-12-002 Description...