| Title | Open Redirect using Host header Injection in phpipam/phpipam |
|---|
| Description | Description: Open Redirect using Host header injection is a type of vulnerability that occurs when a web application redirects a user to a malicious website. This is achieved by manipulating the Host header of the HTTP request to inject a malicious URL into the application, which then redirects the user to that URL. The impact of this vulnerability can range from phishing attacks to spreading malware or other malicious activities.
VENDOR-GITHUB-LINK: https://github.com/phpipam/phpipam
Vulnerability Type - CWE-601: Open Redirect
Affected Version : 1.5.1
GITHUB-POC-LINK AND ALL THE DETAILS ARE GIVEN IN THE BELOW LINK:
LINK : https://github.com/ctflearner/Vulnerability/blob/main/PHPIPAM/Open_Redirect.md |
|---|
| Source | ⚠️ https://github.com/phpipam/phpipam |
|---|
| User | Affan (UID 39417) |
|---|
| Submission | 08/28/2023 17:24 (3 years ago) |
|---|
| Moderation | 09/14/2023 17:36 (17 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 239732 [phpipam 1.5.1 Header X-Forwarded-Host redirect] |
|---|
| Points | 20 |
|---|