CVE-2014-9343: Open redirect vulnerability in modules/system/controller/selectlanguage.class.php in Snowfox CMS 1.0 allows...

Security readout for executives and security teams

Snowfox CMS 1.0 contains an open redirect in its language-selection controller. An attacker could craft a link that appears to use the legitimate Snowfox site but sends the user to a different website, supporting phishing or trust-abuse scenarios. The source bundle does not provide CVSS scoring or active exploitation evidence. Exposure is likely limited to internet-accessible Snowfox CMS 1.0 deployments, especially sites where users follow language-selection links. Evidence does not identify other products or versions. Treat as a moderate phishing-enablement issue, not a direct system compromise based on available evidence. Prioritize if Snowfox CMS 1.0 is public-facing or trusted by customers, because brand abuse can create business impact even without server takeover. Mitigation focus: Inventory for Snowfox CMS 1.0 deployments and exposed language-selection functionality.; Check Snowfox release notes, vendor guidance, and the referenced GitHub commit for remediation details.; If maintaining the code, restrict redirects to same-origin relative paths only..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.