CVE-2024-37656 PoC — gnuboard5 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37656.yaml

Associated Vulnerability

Title:gnuboard5 安全漏洞 (CVE-2024-37656)
Description:gnuboard5是kagla个人开发者的一个应用软件。 gnuboard5 5.5.16版本存在安全漏洞，该漏洞源于bbs/logout.php中URL参数验证不足，可能导致开放重定向攻击。

Description

Gnuboard5 5.5.16 contains an open redirect vulnerability caused by insufficient URL parameter verification in bbs/logout.php, letting remote attackers redirect users to arbitrary URLs, exploit requires crafted URL parameter.

File Snapshot


 id: CVE-2024-37656

info:
  name: GnuBoard5 5.5.16 - Open Redirect
  author: 0x_Akoko
  severity: me

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!