CVE-2024-0781: codeastro internet_banking_system Open Redirect

Vulnerability summary

CVE-2024-0781 is a medium (CVSS 6.1) Open Redirect vulnerability in codeastro internet_banking_system. EPSS estimates a 0.51% chance of exploitation in the next 30 days, higher than 42.8% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 22-01-2024
   PublishedVulnerability first disclosed.
2. 17-06-2025
   Last modifiedVulnerability information updated.

Description

A vulnerability, which was classified as problematic, was found in CodeAstro Internet Banking System 1.0. This affects an unknown part of the file pages_client_signup.php. The manipulation of the argument Client Full Name with the input <meta http-equiv="refresh" content="0; url=https://vuldb.com" /> leads to open redirect. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-251697 was assigned to this vulnerability.

• CWE-601URL Redirection to Untrusted Site ('Open Redirect')The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.