Phpwind goto. php open Redirection Vulnerability (CVE-2015-4134)

Phpwind goto. php open Redirection Vulnerability (CVE-2015-4134)
Phpwind goto. php open Redirection Vulnerability (CVE-2015-4134)

Release date:
Updated on:

Affected Systems:

PHPWind 8.7

Description:

CVE (CAN) ID: CVE-2015-4134

PHPWind is a popular PHP-based Web forum program in China.

Phpwind 8.7 and goto. php have multiple open redirection vulnerabilities. Remote attackers can exploit this vulnerability to perform phishing attacks by using url parameters.

<* Source: vendor
*>

Suggestion:

Vendor patch:

PHPWind
-------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://tetraph.com/security/open-redirect/phpwind-v8-7-open-redirect/

This article permanently updates the link address: