daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

few updates

patch-1
PD-Team 2021-01-29 23:35:27 +05:30
parent 5e7ae851f1
commit 865c778d4b
1 changed files with 9 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
cves/2021/CVE-2021-22873.yaml
View File

@ -4,17 +4,19 @@ info:
name: Revive Adserver < 5.1.0 Open Redirect
author: pudsec
severity: low
description: Open Redirect on Revive Adserver < 5.1.0
description: Revive Adserver before 5.1.0 is vulnerable to open redirects via the dest, oadest, and ct0 parameters of the lg.php and ck.php delivery scripts.
reference: https://nvd.nist.gov/vuln/detail/CVE-2021-22873
requests:
- method: GET
path:
- "{{BaseURL}}/ads/www/delivery/ck.php?ct=1&dest=http://example.com"
- "{{BaseURL}}/adserve/www/delivery/ck.php?ct=1&dest=http://example.com"
- "{{BaseURL}}/adserver/www/delivery/ck.php?ct=1&dest=http://example.com"
- "{{BaseURL}}/openx/www/delivery/ck.php?ct=1&dest=http://example.com"
- "{{BaseURL}}/revive/www/delivery/ck.php?ct=1&dest=http://example.com"
- "{{BaseURL}}/www/delivery/ck.php?ct=1&dest=http://example.com"
- "{{BaseURL}}/ads/www/delivery/lg.php?dest=http://example.com"
- "{{BaseURL}}/adserve/www/delivery/lg.php?dest=http://example.com"
- "{{BaseURL}}/adserver/www/delivery/lg.php?dest=http://example.com"
- "{{BaseURL}}/openx/www/delivery/lg.php?dest=http://example.com"
- "{{BaseURL}}/revive/www/delivery/lg.php?dest=http://example.com"
- "{{BaseURL}}/www/delivery/lg.php?dest=http://example.com"
redirects: true
matchers-condition: and
matchers: