Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Edgewall Trac q参数URI重定向漏洞
Vulnerability Description
Trac是Edgewall公司开发并维护的开放源码网页界面专案管理、缺陷追踪软件。 Trac 0.10.5之前的版本中的搜索脚本存在开放重定向漏洞。远程攻击者可以借助q参数中的一个URL,重新引导用户到任意网站和执行钓鱼攻击。q参数可能涉及quickjump函数。
CVSS Information
N/A
Vulnerability Type
N/A