V-SOL GPON/EPON OLT Platform Open Redirect Vulnerability

An open redirect vulnerability has been identified in V-SOL GPON/EPON OLT Platform version 2.03. This vulnerability allows attackers to manipulate the 'parent' GET parameter in the 'bindProfile.html' script, leading to unauthorized redirection of logged-in users to arbitrary websites. The issue arises from inadequate input validation in the redirection mechanism.

Impact

Exploitation of this vulnerability could facilitate phishing attacks by redirecting users to malicious websites.

Reproduction

To reproduce this vulnerability, send a GET request to the 'bindProfile.html' script with a crafted 'parent' parameter that points to an external website. Ensure the request is made from a logged-in user on a trusted domain, as the vulnerability relies on the redirection being perceived as legitimate.