NVD

Id
11252  
Name
CVE-2011-4951  
Description
Open redirect vulnerability in phpgwapi/ntlm/index.php in EGroupware Enterprise Line (EPL) before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2012-08-31  
Modified Date
2012-09-04  
Seq
2011-4951  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
62276 11252 CVE-2011-4951 [egroupware-german] 20110805 new EGroupware SECURITY & maintenance release 1.8.001.20110805  View
62277 11252 CVE-2011-4951 http://packetstormsecurity.org/files/101675/eGroupware-1.8.001.20110421-Open-Redirect.html  View
62278 11252 CVE-2011-4951 http://www.autosectools.com/Advisory/eGroupware-1.8.001-Reflected-Cross-site-Scripting-178  View
62279 11252 CVE-2011-4951 http://www.egroupware.org/changelog  View
62280 11252 CVE-2011-4951 http://www.egroupware.org/epl-changelog  View
62281 11252 CVE-2011-4951 [oss-security] 20120328 Re: CVE request: egroupware before 1.8.002 various security issues  View
62282 11252 CVE-2011-4951 [oss-security] 20120329 Re: CVE request: egroupware before 1.8.002 various security issues  View
62283 11252 CVE-2011-4951 52770  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34905 JVNDB-2011-005147 EGroupware Enterprise Line および EGroupware Community Edition におけるオープンリダイレクトの脆弱性 EGroupware Enterprise Line (EPL) および EGroupware Community Edition の phpgwapi/ntlm/index.php には、オープンリダイレクトの脆弱性が存在します。 CVE-2011-4951 52858 CVE-2011-4951 11252 5.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005147.html 2011-08-04 2012-09-05 View