CVE-2014-2230 | BDVDB-2026-65812 Detail

Description#

Open redirect vulnerability in the header function in adclick.php in OpenX 2.8.10 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) dest parameter to adclick.php or (2) _maxdest parameter to ck.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.tetraph.com/blog/cves/cve-2014-2230-openx-open-redirect-vulnerability-2
https://exchange.xforce.ibmcloud.com/vulnerabilities/97621
http://seclists.org/fulldisclosure/2014/Oct/72
http://packetstormsecurity.com/files/128718/OpenX-2.8.10-Open-Redirect.html

Exploit#

No public exploit known

History#

Version 12014-10-23Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.