b2evolution CMS <6.11.6 - Open Redirect Detection

b2evolution CMS before 6.11.6 contains an open redirect vulnerability via the redirectto parameter in emailpassthrough.php. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 --...

Open redirect

Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redirects to an attacker controlled resource via redirectto parameter in emailpassthrough.php...

CVE-2020-22840

Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redirects to an attacker controlled resource via redirectto parameter in emailpassthrough.php...

CVE-2020-22840

CVE-2020-22840 affects b2evolution CMS prior to 6.11.6. It is an open redirect in email_passthrough.php via the redirect_to parameter, enabling redirects to attacker-controlled sites. Reported impact includes phishing and data exposure risks; PoCs exist (e.g., exploit-db 49554) and public templat...

CVE-2020-22840: URL Redirection to Untrusted Site

Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redirects to an attacker controlled resource via redirectto parameter in emailpassthrough.php...