Vulnerability · Published Jan 22, 2024 · Assigned by VulDB

CVE-2024-0781CodeAstro Internet Banking System pages_client_signup.php redirect

Low 3.5

In plain English

A low-severity open redirect in Internet Banking System from CodeAstro. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).

Severity (CVSS 3.1)3.5Low

Exploit odds (30 days)0.5%top 56.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability, which was classified as problematic, was found in CodeAstro Internet Banking System 1.0. This affects an unknown part of the file pages_client_signup.php. The manipulation of the argument Client Full Name with the input <meta http-equiv="refresh" content="0; url=https://vuldb.com" /> leads to open redirect. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-251697 was assigned to this vulnerability.

Affected products (as reported)

Vendor	Product	Versions
CodeAstro	Internet Banking System	1.0

Weakness: CWE-601 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

References

https://vuldb.com/?id.251697 vdb-entry, technical-description
https://vuldb.com/?ctiid.251697 signature, permissions-required
https://drive.google.com/drive/folders/1f61RXqelSDY0T92aLjmb8BhgAHt_eeUS exploit