Back to Database
Status published
Medium
CVE-2012-5338
Open redirect vulnerability in JForum 2.1.9 allows remote attackers to...
Vulnerability Description
Open redirect vulnerability in JForum 2.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the returnPath parameter in a validateLogin action to jforum.page.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-5338
Credits & Attribution
No credits recorded in the NVD database.
More from jforum
View All →CVE-2022-26173
JForum v2.8.0 was discovered to contain a Cross-Site Request Forgery...
High
8.8
CVE-2021-40509
ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature....
Medium
5.4
CVE-2019-7550
In JForum 2.1.8, an unauthenticated, remote attacker can enumerate whether...
Medium
5.3
CVE-2013-7209
Cross-site request forgery (CSRF) vulnerability in admBase/login.page in the Admin...
Medium
6.8
CVE-2012-5337
Multiple cross-site scripting (XSS) vulnerabilities in jforum.page in JForum 2.1.9...
Medium
4.3
Affected Vendor
jforum
View all reports →Affected Software
jforum
Vulnerable Versions:
2.1.9
Timeline
Official Publish:
September 23rd, 2013
Last Modified:
September 16th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.