CVE-2014-9180

The CVE-2014-9180 issue affects Eleanor CMS, specifically the go.php open redirect functionality. The vulnerability allows an attacker to redirect users to arbitrary sites by supplying a URL in the QUERY_STRING, enabling phishing and potential credential theft as described in the Nuclei template ...