header-logo
Suggest Exploit
vendor:
HP System Management Homepage
by:
SecurityFocus
5.5
CVSS
MEDIUM
Open Redirection
601
CWE
Product Name: HP System Management Homepage
Affected Version From:
Affected Version To:
Patch Exists: NO
Related CWE:
CPE:
Metasploit:
Other Scripts:
Platforms Tested:
2010

HP System Management Homepage Open Redirection Vulnerability

HP System Management Homepage is prone to an open-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks are possible.

Mitigation:

It is recommended to implement input validation and sanitization to prevent open redirection vulnerabilities. Additionally, users should avoid clicking on suspicious or untrusted links.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/39676/info

HP System Management Homepage is prone to an open-redirection vulnerability because the application fails to properly sanitize user-supplied input.

A successful exploit may aid in phishing attacks; other attacks are possible.

http://www.example.com/red2301.html?RedirectUrl=evil () attacker com