CVE-2013-4723

Published: Apr 25, 2014Modified: May 6, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Open redirect vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the l parameter to track.aspx.

Affected (4)

Products: Ddsn: Cm3 Acora Content Management System

Ddsn

1 product

Cm3 Acora Content Management System

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ddsn Cm3 Acora Content Management System	Version 5.5.0/1b-p1
Ddsn Cm3 Acora Content Management System	Version 5.5.7/12b
Ddsn Cm3 Acora Content Management System	Version 6.0.2/1a
Ddsn Cm3 Acora Content Management System	Version 6.0.6/1a