CVE-2014-2230
openx openx: no CVSS score yet. EPSS 2.0% chance of exploitation in the next 30 days.
Open redirect vulnerability in the header function in adclick.php in OpenX 2.8.10 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) dest parameter to adclick.php or (2) _maxdest parameter to ck.php.
- EPSS
- 2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- openx:openx
References
- http://packetstormsecurity.com/files/128718/OpenX-2.8.10-Open-Redirect.html
- http://seclists.org/fulldisclosure/2014/Oct/72
- http://www.tetraph.com/blog/cves/cve-2014-2230-openx-open-redirect-vulnerability-2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97621
- http://packetstormsecurity.com/files/128718/OpenX-2.8.10-Open-Redirect.html