Novius OS 5.0.1-elche - Open Redirect

Novius OS 5.0.1 Elche allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to admin/nos/login. id: CVE-2015-5354 info: name: Novius OS 5.0.1-elche - Open Redirect author: 0xAkoko severity: medium description: Novius OS...

EUVD-2015-5309

Malware in sbrugna...

Novius OS Open Redirect Vulnerability

Novius OS is an open source PHP-based content management system CMS. An open redirect vulnerability exists in Novius OS version 5.0.1. A remote attacker can exploit the vulnerability by redirecting users to an arbitrary web site via a URL in the 'redirect' parameter of the admin/nos/login URI to...

Novius OS Directory Traversal Vulnerability

Novius OS is an open source PHP-based content management system CMS. A directory traversal vulnerability exists in Novius OS version 5.0.1. A remote attacker can use the directory traversal character '...' in the 'tab' parameter of the novius-os/admin/ URI to The vulnerability can be exploited to...

CVE-2015-5354

Open redirect vulnerability in Novius OS 5.0.1 Elche allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to admin/nos/login...

Open redirect

Open redirect vulnerability in Novius OS 5.0.1 Elche allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to admin/nos/login...

Directory traversal

Directory traversal vulnerability in Novius OS 5.0.1 Elche allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tab parameter to admin/...

CVE-2015-5353

Directory traversal vulnerability in Novius OS 5.0.1 Elche allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tab parameter to admin/...

CVE-2015-5354

Open redirect vulnerability in Novius OS 5.0.1 Elche allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to admin/nos/login...

CVE-2015-5353

Directory traversal vulnerability in Novius OS 5.0.1 Elche allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tab parameter to admin/...

CVE-2015-5353

Novius OS 5.0.1 Elche (PHP CMS) is affected by CVE-2015-5353 due to a directory traversal in the admin tab parameter, enabling local file inclusion/execution. Public advisories describe LFI, XSS, and Open Redirect vectors; exploitation details appear in Exploit-DB and PacketStorm. Impact includes...

CVE-2015-5354

Summary: CVE-2015-5354 affects Novius OS 5.0.1-elche and enables an open redirect via the redirect parameter to admin/nos/login, potentially facilitating phishing. The Nuclei template and CNVD/NVD entries corroborate an open redirect issue in the same version. Impact (as stated): remote attackers...

Novius OS 5.0.1-elche XSS / LFI / Open Redirect

Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-NOVIUSOS0629.txt Vendor: ======================= community.novius-os.org Product: =============================================================== novius-os.5.0.1-elche is a PHP...