Description

A Host Header Injection vulnerability in qdPM 9.1 may allow an attacker to spoof a particular header and redirect users to malicious websites.

Remediation

References

CVE-2020-11814

Related Vulnerabilities

PHP Integer Overflow or Wraparound Vulnerability (CVE-2015-8387)

WordPress Plugin WordPress Email Template Designer-WP HTML Mail Cross-Site Request Forgery (3.0.6)

WordPress Plugin Easy Testimonials Cross-Site Request Forgery (3.6.1)

PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-2202)

Lighttpd Other Vulnerability (CVE-2007-1869)

Severity

Medium

Classification

CVE-2020-11814 CWE-138 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities