Novius OS 5.0.1-elche - Open Redirect

Novius OS 5.0.1 Elche allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to admin/nos/login. id: CVE-2015-5354 info: name: Novius OS 5.0.1-elche - Open Redirect author: 0xAkoko severity: medium description: Novius OS...

EUVD-2015-5309

Malware in sbrugna...

Novius OS Open Redirect Vulnerability

Novius OS is an open source PHP-based content management system CMS. An open redirect vulnerability exists in Novius OS version 5.0.1. A remote attacker can exploit the vulnerability by redirecting users to an arbitrary web site via a URL in the 'redirect' parameter of the admin/nos/login URI to...

Novius OS Directory Traversal Vulnerability

Novius OS is an open source PHP-based content management system CMS. A directory traversal vulnerability exists in Novius OS version 5.0.1. A remote attacker can use the directory traversal character '...' in the 'tab' parameter of the novius-os/admin/ URI to The vulnerability can be exploited to...

CVE-2015-5354

Open redirect vulnerability in Novius OS 5.0.1 Elche allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to admin/nos/login...

CVE-2015-5353

Directory traversal vulnerability in Novius OS 5.0.1 Elche allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tab parameter to admin/...

Open redirect

Open redirect vulnerability in Novius OS 5.0.1 Elche allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to admin/nos/login...

Directory traversal

Directory traversal vulnerability in Novius OS 5.0.1 Elche allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tab parameter to admin/...

CVE-2015-5353

Directory traversal vulnerability in Novius OS 5.0.1 Elche allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tab parameter to admin/...

CVE-2015-5354

Open redirect vulnerability in Novius OS 5.0.1 Elche allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to admin/nos/login...

CVE-2015-5353

Novius OS 5.0.1 Elche (PHP CMS) is affected by CVE-2015-5353 due to a directory traversal in the admin tab parameter, enabling local file inclusion/execution. Public advisories describe LFI, XSS, and Open Redirect vectors; exploitation details appear in Exploit-DB and PacketStorm. Impact includes...

CVE-2015-5354

Summary: CVE-2015-5354 affects Novius OS 5.0.1-elche and enables an open redirect via the redirect parameter to admin/nos/login, potentially facilitating phishing. The Nuclei template and CNVD/NVD entries corroborate an open redirect issue in the same version. Impact (as stated): remote attackers...

PT-2015-6861

Name of the Vulnerable Software and Affected Versions Novius OS version 5.0.1 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. This is achieved via a URL in the redirect parameter to the "admin/nos/login" API endpoint...

CVE-2015-5353: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Novius OS 5.0.1 Elche allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tab parameter to admin/...

CVE-2015-5354: URL Redirection to Untrusted Site

Open redirect vulnerability in Novius OS 5.0.1 Elche allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to admin/nos/login...

PT-2015-6860

Name of the Vulnerable Software and Affected Versions Novius OS version 5.0.1 Description A directory traversal issue allows remote attackers to include and execute arbitrary local files. This is achieved by using a .. dot dot in the tab parameter to the "admin/" endpoint. Recommendations For...

Novius OS 5.0.1-elche XSS / LFI / Open Redirect

Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-NOVIUSOS0629.txt Vendor: ======================= community.novius-os.org Product: =============================================================== novius-os.5.0.1-elche is a PHP...