CVE-2014-5127

Open redirect vulnerability in Innovative Interfaces Encore Discovery Solution 4.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in an unspecified parameter...

CVE-2014-5128

Innovative Interfaces Encore Discovery Solution 4.3 places a session token in the URI, which might allow remote attackers to obtain sensitive information via unspecified vectors...

PT-2014-6297

Name of the Vulnerable Software and Affected Versions Innovative Interfaces Encore Discovery Solution version 4.3 Description The issue allows remote attackers to potentially obtain sensitive information via unspecified vectors, as the session token is placed in the URI. Recommendations For...

CVE-2014-5127: Undefined Security Weakness

Open redirect vulnerability in Innovative Interfaces Encore Discovery Solution 4.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in an unspecified parameter...

CVE-2014-5128: Exposure of Sensitive Information to an Unauthorized Actor

Innovative Interfaces Encore Discovery Solution 4.3 places a session token in the URI, which might allow remote attackers to obtain sensitive information via unspecified vectors...

PT-2014-6296

Name of the Vulnerable Software and Affected Versions Innovative Interfaces Encore Discovery Solution version 4.3 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in an unspecified parameter. This could potentially lead ...