{"id":"CVE-2011-5252","aliases":["EUVD-2011-5151","GHSA-m52h-228p-7rxq"],"status":"published","title":"Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before...","description":"Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1.2.42, and 1.3.x before 1.3.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the ReturnUrl parameter.","severity":{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.11927,"percentile":0.9614,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-20"],"published":"2013-01-12T02:00:00Z","modified":"2026-06-16T23:36:13Z","exploits":[{"source":"exploitdb","id":"EDB-36493","title":"Orchard 1.3.9 - 'ReturnUrl' Open Redirection","type":"webapps","platform":"php","date":"2012-01-04","verified":true,"url":"https://www.exploit-db.com/exploits/36493"},{"source":"nuclei","id":"CVE-2011-5252","title":"Orchard 'ReturnUrl' Parameter URI - Open Redirect","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-5252.yaml"}],"products":[{"vendor":"orchardproject","product":"orchard"}],"references":[{"url":"http://secunia.com/advisories/47398","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.mavitunasecurity.com/open-redirection-vulnerability-in-orchard/","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/72110","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2012-01/0023.html","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Exploit"]},{"url":"http://www.securityfocus.com/bid/51260","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://orchard.codeplex.com/discussions/283667","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-5252"},{"url":"http://www.mavitunasecurity.com/open-redirection-vulnerability-in-orchard"},{"url":"https://github.com/advisories/GHSA-m52h-228p-7rxq"}],"sources":{"cve":[{"id":"CVE-2011-5252","description":"Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1.2.42, and 1.3.x before 1.3.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the ReturnUrl parameter.","status":"published","published":"2013-01-12T02:00:00Z","modified":"2024-08-07T00:30:46.825Z","updated_at":"2026-11-02T14:35:36.252742Z"}],"euvd":[{"id":"EUVD-2011-5151","description":"Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1.2.42, and 1.3.x before 1.3.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the ReturnUrl parameter.","status":"published","published":"2013-01-12T02:00:00Z","modified":"2024-08-07T00:30:46Z","updated_at":"2026-11-03T01:39:47.222761Z"}],"ghsa":[{"id":"GHSA-m52h-228p-7rxq","title":"Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before...","description":"Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1.2.42, and 1.3.x before 1.3.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the ReturnUrl parameter.","status":"published","published":"2022-05-17T01:50:09Z","modified":"2025-04-11T04:07:18Z","cwes":["CWE-20"],"updated_at":"2026-11-02T15:01:13.040475Z"}],"nvd":[{"id":"CVE-2011-5252","description":"Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1.2.42, and 1.3.x before 1.3.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the ReturnUrl parameter.","status":"published","published":"2013-01-12T04:33:48.993Z","modified":"2026-06-16T23:36:13.603Z","cvss":[{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:12.639283Z"}]}}