CVE-2015-5354

Open redirect vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to admin/nos/login.

CVSS v2.0 NVD

5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS

12.44% chance of exploitation in the next 30 days, 96th percentile

Nuclei

medium · CWE-601

Published

2015-07-01

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://packetstormsecurity.com/files/132478/Novius-OS-5.0.1-elche-XSS-LFI-Open-Redirect.h…

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5354.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/37439

Security advisories

• http://hyp3rlinx.altervista.org/advisories/AS-NOVIUSOS0629.txt
• http://www.securityfocus.com/archive/1/535876/100/0/threaded

References

• CVE Record
• NVD entry