CVEvulnerability
CVE-2014-2230
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-10-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
Description
Open redirect vulnerability in the header function in adclick.php in OpenX 2.8.10 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) dest parameter to adclick.php or (2) _maxdest parameter to ck.php.
Affected configurations
• openx openx (<= 2.8.10)
• openx openx 2.8
• openx openx 2.8.1
• openx openx 2.8.2
• openx openx 2.8.3
• openx openx 2.8.4
• openx openx 2.8.5
• openx openx 2.8.6
• openx openx 2.8.7
• openx openx 2.8.8
• openx openx 2.8.9
References
- http://packetstormsecurity.com/files/128718/OpenX-2.8.10-Open-Redirect.html Exploit
- http://seclists.org/fulldisclosure/2014/Oct/72 Exploit
- http://www.tetraph.com/blog/cves/cve-2014-2230-openx-open-redirect-vulnerability-2 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97621 exchange.xforce.ibmcloud.com
- http://packetstormsecurity.com/files/128718/OpenX-2.8.10-Open-Redirect.html Exploit
- http://seclists.org/fulldisclosure/2014/Oct/72 Exploit
- http://www.tetraph.com/blog/cves/cve-2014-2230-openx-open-redirect-vulnerability-2 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97621 exchange.xforce.ibmcloud.com