PT-2008-2584
CVE-2008-0981
·
تاريخ النشر
2008-02-25
·
تاريخ التحديث
2018-10-15
الوصف من
CVSS 2.0
6.4
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Spyce - Python Server Pages (PSP) version 2.1.3
Description
The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the
url parameter. This can be exploited by providing a malicious URL to the vulnerable application.Recommendations
For Spyce - Python Server Pages (PSP) version 2.1.3, consider validating and sanitizing the
url parameter to prevent redirects to arbitrary web sites. As a temporary workaround, restrict access to the redirect functionality to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾