CVE-2015-1060

MEDIUM 5.8CVE-2015-1060 · Published 16/01/2015 · updated 17/06/2026

In short

CVE-2015-1060 is a MEDIUM (CVSS 5.8) vulnerability affecting adaptcms (insanevisions).
Chance of exploitation in the next 30 days (EPSS): 4.4%, higher than 91.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
adaptcms insanevisions	`= 3.0.3`	No fix yet

Description

Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header.

References

osvdb.org/show/osvdb/116721
packetstormsecurity.com/files/129813/AdaptCMS-3.0.3-HTTP-Referer-Header-Open-Redirect.html · Exploit
exploit-db.com/exploits/35710 · Exploit
zeroscience.mk/en/vulnerabilities/ZSL-2015-5219.php · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/99618

More vulnerabilities in adaptcms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free