Unrated severityNVD Advisory· Published Dec 8, 2014· Updated May 6, 2026
CVE-2014-9343
CVE-2014-9343
Description
Open redirect vulnerability in modules/system/controller/selectlanguage.class.php in Snowfox CMS 1.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the rd parameter in a submit action to snowfox/.
Affected products
1- cpe:2.3:a:globiz_solutions:snowfox_content_management_system:1.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5206.phpnvdExploit
- github.com/GlobizSolutions/snowfox/commit/55a8e44a9d9a9a788cc1cde6baf0c2c67e0c736anvdExploit
- osvdb.org/show/osvdb/114850nvd
- packetstormsecurity.com/files/129162/Snowfox-CMS-1.0-Open-Redirect.htmlnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/99128nvd
News mentions
0No linked articles in our index yet.