lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  PHC 
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date: Wed, 1 Feb 2017 08:48:17 +0100
From: Estación Informática
Subject: [FD] Vulnerability Open Redirect LogicBoard CMS

Affected Component: /forum/away.php?s=

*Vulnerability Type:*
Vulnerability Open Redirect

*Vendor of Product: *
LogicBoard CMS

*Version: *
3.0, 4.0, 4.1

*Attack Type: *

A web application accepts a user-controlled input that specifies a link to
an external site, and uses that link in a Redirect. This simplifies
phishing attacks. An http parameter may contain a URL value and could cause
the web application to redirect the request to the specified URL. By
modifying the URL value to a malicious site, an attacker may successfully
launch a phishing scam and steal user credentials. Because the server name
in the modified link is identical to the original site, phishing attempts
have a more trustworthy appearance.
 Attack Vectors: s=   Infection from malware and phishing attack.

LogicBoard CMS: It's a CMS oriented forums engines, ideal for corporate
sites, online shops, communities and so on.

These vulnerabilities have been discovered by
Francisco Javier Santiago Vázquez  aka "n0ipr0cs"

*Disclosure Timeline:*
Agust 28, 2016: Vulnerability acquired by Francisco Javier Santiago
Vázquez. aka "n0ipr0cs".
29 Agust, 2016 Responsible disclosure to Babylon Security Team.
30 Agust, 2016 Responsible disclosure to Babylon Security Team.
31 Agust, 2016 Responsible disclosure to Babylon Security Team.
03 January, 2017 Forward mail, please let me know when the vulnerability be
solved in order to publish it.
31 January, 2017 Disclosure.


*Francisco Javier Santiago Vázquez Security Researcher & Ethical Hacker

Sent through the Full Disclosure mailing list
Web Archives & RSS:

Powered by blists - more mailing lists