Polaris’ Intellect Core Banking Software Version 9.7.1- Open Redirect [CVE-2018-14931]
[+] Credits: Neeraj
Kumar, Hai Dang Long
[+] Email:
neeraj.iiita2009@gmail.com
Vendor:
====================
Product:
===================
Polaris’
Intellect Core Banking, Core and Portal Module
Version:
===================
Affected
Version: 9.7.1
Vulnerability
Type:
====================
Open Redirect
CVE Reference:
==============
CVE-2018-14931
Vulnerability
Details:
======================
Polaris’
Intellect Core Banking Software, In the Core module is vulnerable to open
redirect vulnerability. Open redirection vulnerabilities arise when an
application incorporates user-controllable data into the target of a
redirection in an unsafe way. An attacker can construct a URL within the
application which causes a redirection to an arbitrary external domain. This
behaviour can be leveraged to facilitate phishing attacks against users of the
application. The ability to use an authentic application URL, targeting the
correct domain with a valid SSL certificate (if SSL is used) lends credibility
to the phishing attack because many users, even if they verify these features,
will not notice the subsequent redirection to a different domain.
Exploit URL(s):
====================
http://<targetIP>/IntellectMain.jsp?IntellectSystem=https://google.com
It ill redirect
to http://www.google.com
Affected
Component:
====================
Parameters Name:
IntellectSystem
Disclosure
Timeline:
=====================
Vendor
Notification: 17 June 2018
Mitre
Notification: 04 August 2018
Public
Disclosure: 31 March 2019
Attack Type:
=====================
Remote
Impact Code
execution:
=====================
True
Impact
Information Disclosure
=====================
True
Description:
=====================================================
Request
Method(s): [+] Get
Vulnerable
Product: [+] Polaris’ Intellect Core Banking, Core and Portal Modules
Vulnerable
Parameter(s): [+] IntellectSystem
Reference:
=====================
[+] Disclaimer
=====================================================
The information
contained within this advisory is supplied "as-is" with no warranties
or guarantees of fitness of use or otherwise. Permission is hereby granted for
the redistribution of this advisory, provided that it is not altered except by
reformatting it, and that due credit is given. Permission is explicitly given
for insertion in vulnerability databases and similar, provided that due credit
is given to the author. The author is not responsible for any misuse of the
information contained herein and accepts no responsibility for any damage
caused by the use or misuse of this information. The author prohibits any
malicious use of security related information or exploits by the author or elsewhere.
All content (c).

Wonderful Blog!!! Waiting for your upcoming data... thanks for sharing with us.
ReplyDeleteSoftware Testing Training in Chennai
software testing course in chennai
software testing course
software testing training institute in chennai
Software testing training in Velachery
Software testing training in Adyar
Python Training in Chennai
Digital marketing course in chennai
JAVA Training in Chennai
keep up the good work. this is an Assam post. this to helpful, i have reading here all post. i am impressed. thank you. this is our digital marketing training center. This is an online certificate course
ReplyDeletedigital marketing training in bangalore | https://www.excelr.com/digital-marketing-training-in-bangalore
Love your website. Keep up the good work.
ReplyDeleteTo get more Branding updates visit our
brandebuzz.com website Smart Branding Solutions in Hyderabad
I came across your website. It’s awesome, dude. I told my brother about it. He’s bookmarked your site.
ReplyDeleteTo get more Branding updates visit our
brandebuzz.com website Smart Branding Solutions in hyderabad
Great share!,
ReplyDeleteTo get more Branding updates visit our
brandebuzz.com website Smart Branding Solutions
I appreciate you for this blog. More informative, thanks for sharing with us.
ReplyDeleteSalesforce Training in Chennai
salesforce training in bangalore
Salesforce Course in Bangalore
best salesforce training in bangalore
salesforce institute in bangalore
salesforce developer training in bangalore
Python Training in Coimbatore
Angularjs Training in Bangalore
ssalesforce training in marathahalli
salesforce institutes in marathahalli
I was very pleased to find this great site. I need to to thank you for ones time for this fantastic read!! I definitely appreciated every part of it and i also have you book-marked to see new stuff on your web site.
ReplyDeleteTech PC
ReplyDeleteThis post is really nice and informative. The explanation given is really comprehensive and informative. I also want to say about the digital marketing training .
Such a very useful article. Very interesting to read this article.I would like to thank you for the efforts you had made for writing this awesome article. data analytics courses
ReplyDeleteI just got to this amazing site not long ago. I was actually captured ExcelR Pune Digital Marketing Course with the piece of resources you have got here. Big thumbs up for making such wonderful blog page!
ReplyDeleteCool stuff you have and you keep ExcelR Digital Marketing Classes In Pune overhaul every one of us
ReplyDeleteThe concept has been explained very well. Gained clear knowledge about the prominence of AWS
ReplyDeleteAWS Training in Hyderabad
Thank you for sharing this useful post with us. I have a nutrition & health-related website. I'm telling you about this beautiful topic and this topic is a core training. Core training is very impotent part for every human. I have a website and this website discusses human body fitness and nutrition. Read more please visit this website.
ReplyDeleteYou have provided very good information through blog and it is very important. Thank you so much.
ReplyDeleteBlockchain Training in Hyderabad
Really Great Post & Thanks for sharing.
ReplyDeleteOflox Is The Best Website Designing Company In Dehradun
Hi, Thanks for sharing wonderful articles...
ReplyDeleteAI Training In Hyderabad
Great article like this require readers to think as they read. I took my time when going through the points made in this article. I agree with much this information.
ReplyDeleteBest Data Science training in Mumbai
Data Science training in Mumbai
Thanks for sharing such a informative blog with us. Keep on sharing
ReplyDeleteDevOps Training In Hyderabad
ReplyDeleteYou have provided very good information through blog and it is very important.
Blockchain Training in Hyderabad
I’m impressed, I must say. Seldom do I come across a blog that’s both educative and interesting, and without a doubt, you have hit the nail on the technology head. The problem is an issue that not enough folks are speaking intelligently about. Now i'm very happy I stumbled across this during my hunt for something regarding this.
ReplyDeleteThanks for the informative article About Java. This is one of the best resources I have found in quite some time. Nicely written and great info. I really cannot thank you enough for sharing.
ReplyDeleteJava training in chennai | Java training in annanagar | Java training in omr | Java training in porur | Java training in tambaram | Java training in velachery
thanks for sharing nice information. its Very use full and informative and keep sharing.
ReplyDeletemore : https://www.analyticspath.com/artificial-intelligence-training-in-hyderabad
thanks for sharing nice information. its Very use full and informative and keep sharing.
ReplyDeletemore : https://www.kellytechno.com/Hyderabad/Course/AI-Training-In-Hyderabad
Excellent Blog! I would like to thank for the efforts you have made in writing this post. I am hoping the same best work from you in the future as well. I wanted to thank you for this websites! Thanks for sharing. Great websites!
ReplyDeletedata science course
This post is really nice information.
ReplyDeleteAngularJS training in chennai | AngularJS training in anna nagar | AngularJS training in omr | AngularJS training in porur | AngularJS training in tambaram | AngularJS training in velachery
Thanks for sharing such beautiful information with us . I hope you will share some more info. Please keep sharing!
ReplyDeleteDigital Marketing Training Course in Chennai | Digital Marketing Training Course in Anna Nagar | Digital Marketing Training Course in OMR | Digital Marketing Training Course in Porur | Digital Marketing Training Course in Tambaram | Digital Marketing Training Course in Velachery
I am speechless as to how great this article is. The content is simple to understand and very engaging. This is by far some of the best content I've seen.
ReplyDeleteSAP training in Kolkata
SAP training Kolkata
Best SAP training in Kolkata
SAP course in Kolkata
SAP training institute Kolkata
Thanks for sharing nice information....
ReplyDeletepython Training in Hyderabad
Thanks For the Content Sharing
ReplyDeleteBest AWS Training Institute in Hyderabad
Hi, Thanks for sharing nice articles...
ReplyDeleteAI Training In Hyderabad
Thanks for sharing nice information....
ReplyDeletedevops Training in Hyderabad
Hi, Thanks for sharing nice articles...
ReplyDeleteAI Training In Hyderabad
These ways are very simple and very much useful, as a beginner level these helped me a lot thanks fore sharing these kinds of useful and knowledgeable information.
ReplyDeleteBanking Chatbot
Bank Bot
AI Chatbot for Banking
Bank Chatbot
Thanks for sharing nice information....
ReplyDeleteAWS Training in Hyderabad
Thanks for sharing nice information....
ReplyDeleteDevops Training in Hyderabad
Great Article
ReplyDeleteCloud Computing Projects
Networking Projects
Final Year Projects for CSE
JavaScript Training in Chennai
JavaScript Training in Chennai
The Angular Training covers a wide range of topics including Components, Angular Directives, Angular Services, Pipes, security fundamentals, Routing, and Angular programmability. The new Angular TRaining will lay the foundation you need to specialise in Single Page Application developer. Angular Training
Hi, Thanks for sharing nice stuff...
ReplyDeleteAI Training in Hyderabad
Thanks for sharing nice information....
ReplyDeleteData Science Training in Hyderabad
Really Very Infromative Post , Thanks For Sharing The Information With Us.
ReplyDeleteBest AWS Training Institute in Hyderabad
Thank you so much for this incredible guide. This has given me so much information
ReplyDeleteAI Training in Hyderabad
ReplyDeleteThanks For Sharing The Wonderfull Content With Us !
Best Degree College In Hyderabad
Best Degree College In Attapur
Attend The Data Analyst Course From ExcelR. Practical Data Analyst Course Sessions With Assured Placement Support From Experienced Faculty. ExcelR Offers The Data Analyst Course.
ReplyDeleteData Analyst Course
This is truly unique and excellent information. I sense you think a lot like me, or vice versa. Thank you for sharing this great article.
ReplyDeleteSAP training in Kolkata
SAP training Kolkata
Best SAP training in Kolkata
SAP course in Kolkata
I am highly overwhelmed to read this perfect piece of writing. It has really enthused me to read more on this topic.
ReplyDeleteData Science training in Mumbai
Data Science course in Mumbai
SAP training in Mumbai
Very interesting to read this article.I would like to thank you for the efforts you had made for writing this awesome article. This article inspired me to read more. keep it up.
ReplyDeleteAWS Training in Hyderabad
Howdy! I simply wish to offer you a big thumbs up for your great info you have got here on this post. I'll be returning to your blog for more soon.
ReplyDeleteData Science Training in Hyderabad
I am looking for and I love to post a comment that "The content of your post is awesome" Great work!
ReplyDeleteSimple Linear Regression
Correlation vs covariance
KNN Algorithm
Logistic Regression explained
I am looking for and I love to post a comment that "The content of your post is awesome" Great work!
ReplyDeletedata science interview questions
Astogurutips is the top best Online Astrology website in India with more than 500+ astrologer on the portal. He gives a Best Astrology solutions from the Best Astrologers . You can connect with our astrologer through call or chat and ask you any question about your carrier, health, future, love partner etc. Free astrology service on phone
ReplyDeleteNice blog!!
ReplyDeleteBank Software
Cool stuff you have and you keep overhaul every one of us
ReplyDeleteSimple Linear Regression
Correlation vs Covariance
very well explained .I would like to thank you for the efforts you had made for writing this awesome article. This article inspired me to read more. keep it up.
ReplyDeleteSimple Linear Regression
Correlation vs covariance
data science interview questions
KNN Algorithm
Logistic Regression explained
Thanks for sharing an information to us.
ReplyDeleteData Science Online Training
enterprise billing & pricing management solutions
ReplyDeletePersonalize products, offers, pricing and loyalty programs; prevent revenue leakage and ensure regulatory compliance with an enterprise billing solution.
I am really happy to say it’s an interesting post to read . I learn new information from your article , you are doing a great job . Keep it up
ReplyDeleteDevops Training in USA
Hadoop Training in Hyderabad
Python Training in Hyderabad
Well Explained Content thanks For Sharing The Information With Us data science training in Hyderabad
ReplyDeleteGreat information about wilderness for beginners giving the opportunity for new people. Gaming Jackets
ReplyDeleteThanks for sharing..
ReplyDeleteCybonetic Technologies IT & Software Development Company in Patna, focusing on the development of software, mobile app, e-comm, web hosting, bulk sms, Digital Marketing services.
Thank you for sharing.
ReplyDeleteData Science Online Training
Python Online Training
Salesforce Online Training
I really appreciate the kind of topics you post here. Thanks for sharing us a great information that is actually helpful.
ReplyDeletegeorge michael leather jacket
This was definitely one of my favorite blogs. Every post published did impress me. ExcelR Data Analytics Course
ReplyDeleteevent management software
ReplyDeletevirtual event platform
best virtual event software
live event trivia
live audience polling
event website builder
online event ticketing
Wonderful blog found to be very impressive to come across such an awesome blog. I should really appreciate the blogger for the efforts they have put in to develop such an amazing content for all the curious readers who are very keen of being updated across every corner. Ultimately, this is an awesome experience for the readers. Anyways, thanks a lot and keep sharing the content in future too.
ReplyDeleteDigital Marketing training in Bhilai
homify
ReplyDeleteclick ad post
cliq a friq
spigo tmc
easy zoom
brown book
tech site
tele type
ted
ask fm
Wow such an amazing content keep it up. I have bookmarked your page to check out more informative content here.
ReplyDeleteSASVBA provides professional AI training course in Delhi with the help of industry experts. Artificial intelligence is a method of building a computer-controlled robot, computer, or software that thinks wisely as well as intelligently. It is science and technology-based on subjects such as computer science, biology, psychology, linguistics, mathematics, and engineering.
FOR MORE INFO:
Nice Post. I like your blog. Thanks for Sharing.
ReplyDeleteDevOps Training
DevOps Online Training
It’s a nice blog with very useful information!!!
ReplyDeleteSwift developer course in chennai
Swift Developer Training in Bangalore
Cyber security course in chennai
Cyber Security Course in Bangalore
Software Testing Training in Chennai
Artificial Intelligence Course in Chennai
Full stack developer course in chennai
Graphic Design courses in Chennai
valuable blog,Informative content...thanks for sharing, Waiting for the next update...
ReplyDeleteSilk Test Course in Chennai
Silk Test Classes in Chennai
I read your article it is very interesting and every concept is very clear, thank you so much for sharing. AWS Certification Course in Chennai
ReplyDeleteWonderful Blog, thanks for sharing this blog with us, waiting for your next update.
ReplyDeleteDigital Marketing Training in Chennai
Digital Marketing Online Course
Digital Marketing Training in Coimbatore
I really liked your blog post.Much thanks again. Awesome.
ReplyDeletedata science training
python training
angular js training
selenium trainings
sql server dba training
spark online training
ReplyDeletescala online training
azure devops online training
app v online training
Hey, I agree with you and i have same dilemma. After reading your posts I went back in and I set my discussions such that now all my requirements related to banking software development company. This is really awesome but that's why you always crank out my friend. Great posts about Restaurant Order Management System that we can sink our teeth into and really go to work.
ReplyDeleteThanks for sharing, as otherwise i would not have thought about trying IT consulting companies in NYC.
Only required information’s., Great blog to check out.
ReplyDeleteSelenium Training in Chennai
Software Testing Training in Chennai
Thanks for sharing this blog along with reference links.
ReplyDeleteData Science Training in Chennai
Hacking Course in Chennai
Once again you provide several doses of reality which explore the complete explanation of packing and moving companies in Bangalore. This article don't have to be that long. I simply couldn't leave your web site before suggesting that I actually loved the usual info on packing and movers services in Bangalore.
ReplyDeleteThanks for posting the best information and the blog is very important.artificial intelligence course in hyderabad
ReplyDeletecore banking platform
ReplyDeleteWith SunTec Ecosystem Management, co-innovate and create solutions which solve specific customer lifecycle needs.
Stupendous blog huge applause to the blogger and hoping you to come up with such an extraordinary content in future. Surely, this post will inspire many aspirants who are very keen in gaining the knowledge. Expecting many more contents with lot more curiosity further.
ReplyDeleteData Science Certification in Bhilai
Extraordinary blog went amazed with the content that they have developed in a very descriptive manner. This type of content surely ensures the participants to explore themselves. Hope you deliver the same near the future as well. Gratitude to the blogger for the efforts.
ReplyDeleteData Science Training
Impressive blog to be honest definitely this post will inspire many more upcoming aspirants. Eventually, this makes the participants to experience and innovate themselves through knowledge wise by visiting this kind of a blog. Once again excellent job keep inspiring with your cool stuff.
ReplyDeleteData Science Training in Bhilai
Wonderful blog found to be very impressive to come across such an awesome blog. I should really appreciate the blogger for the efforts they have put in to develop such an amazing content for all the curious readers who are very keen of being updated across every corner. Ultimately, this is an awesome experience for the readers. Anyways, thanks a lot and keep sharing the content in future too.
ReplyDeleteData Science Course in Bhilai
www.escortsmate.com
ReplyDeleteescortsmate.com
https://www.escortsmate.com
Thanks for bringing such innovative content which truly attracts the readers towards you. Certainly, your blog competes with your co-bloggers to come up with the newly updated info. Finally, kudos to you.
ReplyDeleteData Science Course in Varanasi
It's actually a great and helpful piece of information. I am satisfied that you just shared this useful information for us.
ReplyDeleteIndian Freeway Jacket
Our team of experts develops tailored and device-based solutions that help the end-to - end student learning process at reasonable rates. We do provide learners app and app for teachers with simple-to-use features, multi - channel access, and multi-level analytic tools.
ReplyDeletehttps://lilacinfotech.com/what-we-do/e-learning-educational-on-demand-app-development-india
python online training in hyderabad
ReplyDeletepython online training hyderabad
This is great collection of shotguns at British shooting show. Drive Scorpion Jacket
ReplyDeleteHey, thanks for the blog article.Really thank you! Great.
ReplyDeletedata science course in hyderabad
data science training in hyderabad
banking software
ReplyDeletePersonalize products, offers, pricing and loyalty programs; prevent revenue leakage and ensure regulatory compliance with a billing solution.
Thanks for posting the best information and the blog is very good.data science course in Lucknow
ReplyDeleteNice post and thanks for sharing. keep going
ReplyDeleteAre you searching for any inexpensive billing software in Chennai? We are here
Billing Software in Chennai
Restaurant Billing Software in Chennai
Nice Blog, it is very Impressive.Keep Sharing With us.
ReplyDeleteSilk Test Training
Silk Test Course in Chennai
Amazingly by and large very interesting post. I was looking for such an information and thoroughly enjoyed examining this one. Keep posting. An obligation of appreciation is all together for sharing.data scientist course in bhubaneswar
ReplyDeleteExcellent content ,Thanks for sharing this .,
ReplyDeleteMust have Skills for online teachers
Free teaching tools
Excellent content ,Thanks for sharing this .,
ReplyDeleteOnline teaching platform
Online teaching tool
Thanks for sharing this.,
ReplyDeleteLeanpitch provides online training in Scrum Master, everyone can use it wisely.
Join Leanpitch 2 Days CSM Certification Workshop in different cities.
Scrum master certification
csm certification
Thanks for sharing this.,
ReplyDeletecertified scrum master certification
agile scrum master certification
ReplyDeleteExcellent content ,Thanks for sharing this .,
CSPO certification
CSPO TRAINING
ReplyDeleteExcellent content ,Thanks for sharing this .,
Leanpitch provides online training in ICP ACC, everyone can use it wisely.
Agile coach certification
ICP ACC certification
Excellent content ,Thanks for sharing this .,
ReplyDeleteScrum master certiification Hyderabad
CSM certification in Hyderabad
Excellent content ,Thanks for sharing this .,
ReplyDeleteScrum master certiification Delhi
CSM certiification Delhi
Excellent content ,Thanks for sharing this .,
ReplyDeleteScrum master certiification Chennai
CSM certiification Chennai
pricing management software for banking
ReplyDeletePersonalize products, offers, pricing and loyalty programs; prevent revenue leakage and ensure regulatory compliance with a billing solution.
Great blog. You will find the loan application process effortless, convenient, and easy with Bhumi Finance. So, it allows you to fulfill your pre-owned car loan requirements and celebrate with your family without holding back. You can Business Loan Agents in Varanasi at any time via the website.
ReplyDeleteIt is extremely nice to see the greatest details presented in an easy and understanding manner.
ReplyDeletedata science course in hyderabad
Thanks for sharing a valuable information.
ReplyDeleteBest Interior Designers in Chennai
Best Interior Decorators in Chennai
chennai renovation
flat renovation contractor services in chennai
modular kitchen in chennai
false ceiling contractor services in chennai
carpenter services in chennai
İnstagram takipçi satın al! İnstagram takipçi sitesi ile takipçi satın al sende sosyal medyada fenomen olmaya bir adım at. Sende hemen instagram takipçi satın almak istiyorsan tıkla:
ReplyDelete1- takipçi satın al
2- takipçi satın al
3- takipçi satın al
That is nice article from you , this is informative stuff . Hope more articles from you . I also want to share some information about micro nutrient for plant growth
ReplyDeleteI finally found great post here.I will get back here. I just added your blog to my bookmark sites. thanks.Quality posts is the crucial to invite the visitors to visit the web page, that's what this web page is providing.data science course in rohtak
ReplyDeleteWe are looking for an informative post it is very helpful thanks for sharing it. We are offering all types of leather jackets with worldwide free shipping.
ReplyDeleteBlack Leather Jacket
Leather Bomber Jacket
Mens Biker Leather Jacket
Western Leather Jackets
I have to thank you for the time i spent on this especially great reading !! i really liked each part and also bookmarked you for new information on your site.
ReplyDeleteGreat information.Thanks for sharing the article
Data science course in hyderabad
Data science training in hyderabad
This post is very simple to read and appreciate without leaving any details out. Great work!data science course in chennai
ReplyDeleteI have to thank you for the time i spent on this especially great reading !! i really liked each part and also bookmarked you for new information on your site.
ReplyDeleteData science course in hyderabad
Data science training in hyderabad
Your internet site is in fact cool and this is a pleasant challenging article. thank you this is excellent blog. Facebook ID Password Hacker Software
ReplyDeletePlease proportion extra considering that. New net web site is calling high-quality. thanks for the pleasant effort. Recuva Crack
ReplyDeleteThanks for sharing a valuable information.All is very fascinating to learn and simple to grasp. Thanks for sharing such great info. Keep Post These kinds of Articles in the future.
ReplyDeleteHome
fashion designing course in chennai
interior designing course in chennai
web & graphic designing course in chennai
jewelry designing course in chennai
About us
It is very interesting! Really useful for me and thank you for this amazing blog.
ReplyDeleteVirginia Military Divorce
Abogado de Accidentes de Carro en Santa Ana
ReplyDeleteIt is very useful for me and thank you so much for your sharing this post. Keep updating...
ReplyDeleteSeparation Before Divorce
Cost of Legal Separation VS Divorce
Online Solicitation Of A Minor
Great blogs
ReplyDeletebankrupty lawyer near me
bancruptcy lawyers near me
Nice writing...keep posting...
ReplyDeleteMEAN Stack Courses in Pune
This indeed a very informative and educative post. One thing is for sure you’ll never run out of content. Honestly this post will obviously help a lot of people on what makes up good content and how to structure it for the best result.
ReplyDeleteeCommerce website development in USA