CVE-2011-5252

Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1.2.42, and 1.3.x before 1.3.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the ReturnUrl parameter.

CVSS v2.0

5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS

11.93% chance of exploitation in the next 30 days, 96th percentile

Nuclei

medium · CWE-20

Published

2013-01-12

Updated

2024-08-07

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-5252.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/36493

References

• CVE Record
• NVD entry

Related

• CVE-2011-5233
• CVE-2011-5257
• CVE-2011-5230
• CVE-2011-5258
• CVE-2011-5229
• CVE-2011-5259