CVE-2008-2052

EPSS 1.6%◆ VulnCheck KEV

Vexday Risk Score

40Attention

SSVC decision (CISA)

Act

Exploitation + impact → act immediately

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 1.6%KEV nãoPoC —Nuclei simMetasploit —Patch —

Lifecycle

02 May 2008Published on NVD

Recommendation: Patch as soon as possible — active exploitation confirmed.

Open redirect vulnerability in redirect.php in Bitrix Site Manager 6.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the goto parameter.

Affected products

n/a · n/a

References

http://holisticinfosec.org/content/view/62/45/https://exchange.xforce.ibmcloud.com/vulnerabilities/42157