updated req
parent
84558d10b6
commit
7909fb06fd
|
@ -7,7 +7,7 @@ info:
|
|||
description: |
|
||||
Open redirect vulnerability in age-verification.php in the Age Verification plugin 0.4 and earlier for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_to parameter.
|
||||
reference:
|
||||
- https://www.exploit-db.com/exploits/36540
|
||||
- https://www.exploit-db.com/exploits/18350
|
||||
- https://wordpress.org/plugins/age-verification
|
||||
- https://nvd.nist.gov/vuln/detail/CVE-2012-6499
|
||||
classification:
|
||||
|
@ -19,9 +19,12 @@ info:
|
|||
tags: cve,cve2012,wordpress,wp,wp-plugin,redirect,age-verification
|
||||
|
||||
http:
|
||||
- method: GET
|
||||
path:
|
||||
- "{{BaseURL}}/wp-content/plugins/age-verification/age-verification.php?redirect_to=http%3A%2F%2Fwww.interact.sh"
|
||||
- raw:
|
||||
- |
|
||||
POST /wp-content/plugins/age-verification/age-verification.php HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
|
||||
redirect_to=http://www.interact.sh&age_day=1&age_month=1&age_year=1970
|
||||
|
||||
matchers:
|
||||
- type: regex
|
||||
|
|
Loading…
Reference in New Issue