| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <CAEWuDG5M-Ydt21B7bqK7jAQ_Tm+E7FPTGhc0RLQPUgP3K+V8Wg@mail.gmail.com> Date: Wed, 1 Feb 2017 08:48:17 +0100 From: Estación Informática <franciscojaviersantiagovazquez@...il.com> To: fulldisclosure@...lists.org Subject: [FD] Vulnerability Open Redirect LogicBoard CMS *Description:* URL: mysite.com/forum/away.php?s= Affected Component: /forum/away.php?s= *Vulnerability Type:* Vulnerability Open Redirect https://cwe.mitre.org/data/definitions/601.html *Vendor of Product: * LogicBoard CMS *Version: * 3.0, 4.0, 4.1 *Attack Type: * Remote *Impact:* A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks. An http parameter may contain a URL value and could cause the web application to redirect the request to the specified URL. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials. Because the server name in the modified link is identical to the original site, phishing attempts have a more trustworthy appearance. Attack Vectors: s= Infection from malware and phishing attack. *About:* LogicBoard CMS: It's a CMS oriented forums engines, ideal for corporate sites, online shops, communities and so on. *Credits:* These vulnerabilities have been discovered by Francisco Javier Santiago Vázquez aka "n0ipr0cs" https://es.linkedin.com/in/francisco-javier-santiago-v%C3%A1zquez-1b654050 https://twitter.com/n0ipr0cs *Disclosure Timeline:* Agust 28, 2016: Vulnerability acquired by Francisco Javier Santiago Vázquez. aka "n0ipr0cs". 29 Agust, 2016 Responsible disclosure to Babylon Security Team. 30 Agust, 2016 Responsible disclosure to Babylon Security Team. 31 Agust, 2016 Responsible disclosure to Babylon Security Team. 03 January, 2017 Forward mail, please let me know when the vulnerability be solved in order to publish it. 31 January, 2017 Disclosure. *Link:* http://www.estacion-informatica.com/2017/01/vulnerability-open-redirect-logicboard.html *Francisco Javier Santiago Vázquez Security Researcher & Ethical Hacker <http://www.linkedin.com/pub/francisco-javier-santiago-v%C3%A1zquez/50/540/1b6> <http://estacioninformatica.blogspot.com.es/> <https://twitter.com/n0ipr0cs>* _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/
Powered by blists - more mailing lists