CVE-2011-4553 - CVE House
Back to Database
Status published Medium CVE-2011-4553

Multiple open redirect vulnerabilities in One Click Orgs before 1.2.3...

Vulnerability Description

Multiple open redirect vulnerabilities in One Click Orgs before 1.2.3 allow (1) remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the return_to parameter, and allow (2) remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via crafted characters in the domain name of a subdomain.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-4553

Credits & Attribution

No credits recorded in the NVD database.

References

More from oneclickorgs

View All →
CVE-2011-4678
The password reset feature in One Click Orgs before 1.2.3...
Medium 5
CVE-2011-4677
One Click Orgs before 1.2.3 does not have an off...
High 7.5
CVE-2011-4555
One Click Orgs before 1.2.3 does not require unique e-mail...
Medium 4
CVE-2011-4554
One Click Orgs before 1.2.3 allows remote authenticated users to...
Medium 5.5
CVE-2011-4552
Multiple cross-site scripting (XSS) vulnerabilities in One Click Orgs before...
Medium 4.3

Affected Vendor

oneclickorgs

View all reports →

Affected Software

one click orgs
Vulnerable Versions:
0, 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0, 1.2.1

Timeline

Official Publish: December 6th, 2011
Last Modified: September 16th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.