CVE-2005-4052: Medium severity e107 e107 vulnerability

Published Dec 7, 2005

Updated

e107 0.6174 allows remote attackers to redirect users to other web sites via the download parameter in rate.php, which is used after a user submits a file download rating. NOTE: in the default installation, the eBASE variable restricts the redirection to the same web site.

Affected Software

2 affected components

e107 e107=0.6174

Event History

Dec 7, 2005

CVE Published

11:03 AM

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2005-4052?

CVE-2005-4052 is classified as a potential security vulnerability that allows redirection of users to external sites.

How do I fix CVE-2005-4052?

To fix CVE-2005-4052, update to a newer version of e107 or implement validation checks on the download parameter.

Who is affected by CVE-2005-4052?

CVE-2005-4052 affects users of e107 CMS version 0.6174.

What is the impact of CVE-2005-4052?

The impact of CVE-2005-4052 is the potential for unauthorized redirection of users, which could lead to phishing attacks.

Is CVE-2005-4052 easy to exploit?

CVE-2005-4052 can be exploited remotely, making it a relatively easy target for attackers.