CVE-2024-0781CWE-601

CodeAstro Internet Banking System pages_client_signup.php redirect

Low · published January 22, 2024

CVSS v3.1
3.5
EPSS
1%
Percentile
42.9
In the wild
Unconfirmed
What it is

A vulnerability, which was classified as problematic, was found in CodeAstro Internet Banking System 1.0. This affects an unknown part of the file pages_client_signup.php. The manipulation of the argument Client Full Name with the input <meta http-equiv="refresh" content="0; url=https://vuldb.com" /> leads to open redirect. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-251697 was assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00514 · 42.9th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2024-01-22T16:00Z
EPSS history
Timeline
  • 22 JAN 16:00Z
    CodeAstro Internet Banking System pages_client_signup.php redirect
    cvelistv5