Opoint Media Intelligence 'click.php' URL Redirection Vulnerability

Bugtraq ID:	74254
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 15 2015 12:00AM
Updated:	Apr 15 2015 12:00AM
Credit:	Jing Wang
Vulnerable:	Opoint Media Intelligence 0
Not Vulnerable:

Opoint Media Intelligence 'click.php' URL Redirection Vulnerability

Opoint Media Intelligence is prone to a remote URL-redirection vulnerability.

An attacker can leverage this issue by constructing a URI that includes a malicious site redirection. When an unsuspecting victim follows the URI, they may be redirected to an attacker-controlled site; this may aid in phishing attacks.

Opoint Media Intelligence 'click.php' URL Redirection Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim into following a malicious URI.

Opoint Media Intelligence 'click.php' URL Redirection Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Opoint Media Intelligence 'click.php' URL Redirection Vulnerability

References:

• Vendor Homepage (Opoint)
  
• Opoint Media Intelligence Unvalidated Redirects and Forwards (URL Redirection) S (Seclists.org)