CVE-2015-5354

Open redirect vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to admin/nos/login.

CVSS v2.0

5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS

12.52% chance of exploitation in the next 30 days, 96th percentile

Nuclei

medium · CWE-601

Published

2015-07-01

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://packetstormsecurity.com/files/132478/Novius-OS-5.0.1-elche-XSS-LFI-Open-Redirect.h…

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5354.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/37439

References

• CVE Record
• NVD entry

Related

• CVE-2015-5353
• CVE-2015-5371
• CVE-2015-5347
• CVE-2015-5374
• CVE-2015-5334
• CVE-2015-5376