Autonomy Ultraseek - 'cs.html' Open Redirection

EDB-ID:

32766


Author:

buzzy

Type:

webapps


Platform:

PHP

Date:

2009-01-28


source: https://www.securityfocus.com/bid/33500/info

Autonomy Ultraseek is prone to a remote URI-redirection vulnerability because the application fails to properly sanitize user-supplied input.

A successful exploit may aid in phishing attacks.

http://www.example.com/cs.html?url=http://www.example2.com