cve/2017/CVE-2017-1000027.md

CVE-2017-1000027

Description

Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access.

POC

Reference

• https://cp270.wordpress.com/2017/02/02/security-advisory-open-url-redirect-in-sme-server/

Github

• https://github.com/ARPSyndicate/kenzer-templates