CVE-2009-0347

EPSS 10.3%

Vexday Risk Score

43Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 10.3%KEV nãoPoC públicaNuclei simMetasploit —Patch —

Lifecycle

28 Jan 2009Public PoC

29 Jan 2009Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Open redirect vulnerability in cs.html in the Autonomy (formerly Verity) Ultraseek search engine allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter.

Affected products

n/a · n/a

public PoCs found — 2

githubgithub.com/Cappricio-Securities/CVE-2009-0347★ 0 exploitdbwww.exploit-db.com/exploits/32766unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/48336 http://sunbeltblog.blogspot.com/2009/01/constant-stream-of-ultraseek-redirects.html http://www.kb.cert.org/vuls/id/202753 http://www.securityfocus.com/bid/33500 http://www.ultraseek.com/forums/thread.jspa?messageID=9818