Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Open redirect vulnerability in forum/login.php in vBulletin 4.1.3 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter in a lostpw action.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
vBulletin ‘forum/login.php’脚本输入验证漏洞
Vulnerability Description
vBulletin是美国Internet Brands和vBulletin Solutions公司共同开发的一款开源的商业Web论坛程序。 vBulletin 4.1.3和较早版本中的forum/login.php脚本中存在开放重定向漏洞。通过lostpw操作中url参数，远程攻击者利用该漏洞重定向用户到任意网站进而进行钓鱼攻击。
CVSS Information
N/A
Vulnerability Type
N/A