2022-01-21 11:07:41 +00:00
id : CVE-2009-5020
2022-04-22 10:38:41 +00:00
2022-01-21 11:07:41 +00:00
info :
2022-02-13 18:32:21 +00:00
name : AWStats < 6.95 - Open Redirect
2022-01-21 11:07:41 +00:00
author : pdteam
severity : medium
2022-02-13 18:32:21 +00:00
description : An open redirect vulnerability in awredir.pl in AWStats < 6.95 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
2022-04-22 10:38:41 +00:00
reference :
- https://nvd.nist.gov/vuln/detail/CVE-2009-5020
2022-05-17 09:18:12 +00:00
- http://awstats.sourceforge.net/docs/awstats_changelog.txt
remediation : Apply all relevant security patches and product upgrades.
2022-01-21 11:07:41 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2022-04-22 10:38:41 +00:00
cvss-score : 6.1
2022-01-21 11:07:41 +00:00
cve-id : CVE-2009-5020
cwe-id : CWE-601
2022-06-27 09:43:42 +00:00
tags : cve,cve2009,redirect,awstats
2022-04-22 10:38:41 +00:00
2022-01-21 11:07:41 +00:00
requests :
- method : GET
path :
2022-06-06 10:40:15 +00:00
- '{{BaseURL}}/awstats/awredir.pl?url=interact.sh'
- '{{BaseURL}}/cgi-bin/awstats/awredir.pl?url=interact.sh'
2022-01-21 11:07:41 +00:00
stop-at-first-match : true
matchers :
- type : regex
part : header
regex :
2022-06-06 10:40:15 +00:00
- '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$' # https://regex101.com/r/ZDYhFh/1
2022-02-21 18:33:16 +00:00
2022-02-13 18:32:21 +00:00
# Enhanced by mp on 2022/02/13
