2021-02-20 17:35:47 +00:00
id : dedecms-openredirect
info :
2022-10-19 21:11:27 +00:00
name : DedeCMS - Open Redirect
2021-02-20 17:35:47 +00:00
author : pikpikcu
2023-01-23 22:14:23 +00:00
severity : medium
2022-10-19 21:11:27 +00:00
description : DedeCMS contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.
2022-04-22 10:38:41 +00:00
reference :
- https://blog.csdn.net/ystyaoshengting/article/details/82734888
2022-10-19 21:11:27 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-score : 6.1
cwe-id : CWE-601
2022-05-12 14:18:36 +00:00
metadata :
verified : true
2023-10-14 11:27:55 +00:00
max-request : 1
2022-05-12 14:18:36 +00:00
shodan-query : http.html:"power by dedecms" || title:"dedecms"
2021-02-20 17:35:47 +00:00
tags : dedecms,redirect
2023-04-27 04:28:59 +00:00
http :
2021-02-20 17:35:47 +00:00
- method : GET
path :
2022-06-06 10:40:15 +00:00
- "{{BaseURL}}/plus/download.php?open=1&link=aHR0cHM6Ly9pbnRlcmFjdC5zaA=="
2021-02-20 17:35:47 +00:00
matchers-condition : and
matchers :
- type : word
words :
2022-06-06 10:40:15 +00:00
- "Location: https://interact.sh"
2021-02-20 17:35:47 +00:00
part : header
- type : status
status :
- 302
2023-10-20 11:41:13 +00:00
# digest: 490a0046304402201b8089e2da3e8ca118be513f63f3b97083f6dab0cab0b43aecaa7fc960a25bb0022025eac733795ac1ce7c5df5565354aa0ade41884280ea7b8ba3271562737848ca:922c64590222798bb761d5b6d8e72950
