{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-07-01T19:16:28.761","vulnerabilities":[{"cve":{"id":"CVE-2019-6020","sourceIdentifier":"vultures@jpcert.or.jp","published":"2019-12-26T16:15:11.700","lastModified":"2026-06-17T02:38:35.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in PowerCMS 5.12 and earlier (PowerCMS 5.x), 4.42 and earlier (PowerCMS 4.x), and 3.293 and earlier (PowerCMS 3.x) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL."},{"lang":"es","value":"Una vulnerabilidad de redireccionamiento abierto en PowerCMS versión 5.12 y anteriores (PowerCMS versiones 5.x), versión 4.42 y anteriores (PowerCMS versiones 4.x) y versión 3.293 y anteriores (PowerCMS versiones 3.x), permite a atacantes remotos redireccionar a usuarios a sitios web arbitrarios y llevar a cabo ataques de phishing por medio de una URL especialmente diseñada."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"Alfasado Inc.","product":"PowerCMS","versions":[{"version":"5.12 and earlier (PowerCMS 5.x), 4.42 and earlier (PowerCMS 4.x), and 3.293 and earlier (PowerCMS 3.x)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alfasado:powercms:*:*:*:*:*:*:*:*","versionStartIncluding":"3.01","versionEndIncluding":"3.293","matchCriteriaId":"FA8127F7-C1B7-44E5-BBD4-88DD66573D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:alfasado:powercms:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndIncluding":"4.42","matchCriteriaId":"16AFC3CA-4710-4191-82F1-8A4AF3DE31D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:alfasado:powercms:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndIncluding":"5.12","matchCriteriaId":"E375EBCA-9578-43CD-8007-A0858EBC424F"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN34634458/index.html","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory"]},{"url":"https://www.powercms.jp/news/release-powercms-201910.html","source":"vultures@jpcert.or.jp","tags":["Release Notes","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN34634458/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.powercms.jp/news/release-powercms-201910.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}}]}