CVE-2017-5871 PoC — Odoo 输入验证错误漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5871.yaml

Associated Vulnerability

Title:Odoo 输入验证错误漏洞 (CVE-2017-5871)
Description:Odoo是比利时Odoo公司的一套开源商业系统。 Odoo 8.0-20160726及之前版本和9版本中存在输入验证错误漏洞。该漏洞源于网络系统或产品未对输入的数据进行正确的验证。

Description

An Open Redirect vulnerability in Odoo versions <= 8.0-20160726 and 9.0. This issue allows an attacker to redirect users to untrusted sites via a crafted URL.

File Snapshot


 id: CVE-2017-5871

info:
  name: Odoo <= 8.0-20160726 & 9.0 - Open Redirect
  author: 1337rokudenash

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.