CVE-2008-2878: Yektaweb Academic Web Tools

Medium severity, CVSS 6.4. EPSS: 2.8% chance of exploitation in the next 30 days.

Open redirect vulnerability in rss_getfile.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the file parameter.

Affected products

• Yektaweb Academic Web Tools: up to and including 1.4.2.8; up to and including 1.4.3.1

Published 2008-06-26. Last modified 2026-06-16.