SolarWinds Network Performance Monitor Open Redirect

2015.05.23

Credit: Provensec

Risk: Low

Local: No

Remote: Yes

CVE: N/A

CWE: CWE-601

# Affected software:  SolarWinds Network Performance Monitor
# Type of vulnerability:url redirection
# URL:http://www.solarwinds.com/
# Discovered by: provensec
# Website: provensec.com

#version:N/A
# Proof of concept



http://oriondemo.solarwinds.com/Orion/Login.aspx?ReturnUrl=//google.com

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

SolarWinds Network Performance Monitor Open Redirect

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.