[Secure-testing-team] [Secure-testing-commits] r7192 - data/CVE

Florian Weimer fw at deneb.enyo.de
Fri Nov 2 09:13:07 UTC 2007


>  CVE-2007-5695 (command.php in SiteBar 3.3.8 allows remote attackers to redirect users ...)
> -	- sitebar <unfixed> (low; bug #448690)
> +	- sitebar <unfixed> (unimportant; bug #448690)
> +	NOTE: there is no real exploit scenario

I disagree with that assessment.  Open redirectors pose at least a very
real reputation risk.



More information about the Secure-testing-team mailing list