Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2011-5251

Overview

Vulnerability Score 5.8 5.8
CVE Id CVE-2011-5251
Last Modified 03 Jan 2013 12:00:00
Published 31 Dec 2012 03:55:04
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact PARTIAL PARTIAL
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity MEDIUM
Authentication NONE

CVE-2011-5251

Summary

Open redirect vulnerability in forum/login.php in vBulletin 4.1.3 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter in a lostpw action.

Vulnerable Systems

Application

  • Vbulletin 4.0.0

  • Vbulletin 4.0.1

  • Vbulletin 4.0.2

  • Vbulletin 4.0.3

  • Vbulletin 4.0.4

  • Vbulletin 4.0.5

  • Vbulletin 4.0.6

  • Vbulletin 4.0.7

  • Vbulletin 4.0.8

  • Vbulletin 4.1

  • Vbulletin 4.1.1

  • Vbulletin 4.1.2

  • Vbulletin 4.1.3


References

CONFIRM - http://www.vbulletin.com/forum/showthread.php/381014-Potential-Phishing-Vector?p=2166441


Last Updated: 27 May 2016 11:01:31