Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CVE-2022-0165 PoC — Page Builder KingComposer <= 2.9.6 - Open Redirect

Source
Associated Vulnerability
Title: Page Builder KingComposer <= 2.9.6 - Open Redirect (CVE-2022-0165)
Description:The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kc_get_thumbn AJAX action available to both unauthenticated and authenticated users
Description
WordPress Page Builder KingComposer <=2.9.6 - Open Redirect
Readme

<div align="center">
  <img src="https://blogs.cappriciosec.com/uploaders/CVE-2022-0165-tool.png" alt="logo">
</div>


## Badges



[![MIT License](https://img.shields.io/badge/License-MIT-green.svg)](https://choosealicense.com/licenses/mit/)
![PyPI - Version](https://img.shields.io/pypi/v/CVE-2022-0165)
![PyPI - Downloads](https://img.shields.io/pypi/dm/CVE-2022-0165)
![GitHub all releases](https://img.shields.io/github/downloads/Cappricio-Securities/CVE-2022-0165/total)
<a href="https://github.com/Cappricio-Securities/CVE-2022-0165/releases/"><img src="https://img.shields.io/github/release/Cappricio-Securities/CVE-2022-0165"></a>![Profile_view](https://komarev.com/ghpvc/?username=Cappricio-Securities&label=Profile%20views&color=0e75b6&style=flat)
[![Follow Twitter](https://img.shields.io/twitter/follow/cappricio_sec?style=social)](https://twitter.com/cappricio_sec)
<p align="center">

<p align="center">







## License

[MIT](https://choosealicense.com/licenses/mit/)



## Installation 

1. Install Python3 and pip [Instructions Here](https://www.python.org/downloads/) (If you can't figure this out, you shouldn't really be using this)

   - Install via pip
     - ```bash
          pip install CVE-2022-0165 
        ```
   - Run bellow command to check
     - `CVE-2022-0165 -h`

## Configurations 
2. We integrated with the Telegram API to receive instant notifications for vulnerability detection.
   
   - Telegram Notification
     - ```bash
          CVE-2022-0165 --chatid <YourTelegramChatID>
        ```
   - Open your telegram and search for [`@CappricioSecuritiesTools_bot`](https://web.telegram.org/k/#@CappricioSecuritiesTools_bot) and click start

## Usages 
3. This tool has multiple use cases.
   
   - To Check Single URL
     - ```bash
          CVE-2022-0165 -u http://example.com 
        ```
   - To Check List of URL 
      - ```bash
          CVE-2022-0165 -i urls.txt 
        ```
   - Save output into TXT file
      - ```bash
          CVE-2022-0165 -i urls.txt -o out.txt
        ```
   - Want to Learn about [`CVE-2022-0165`](https://blogs.cappriciosec.com/cve/169/%20The%20KingComposer%20WordPress%20Plugin%20Open%20Redirect%20Vulnerability%20(CVE-2022-0165))? Then Type Below command
      - ```bash
          CVE-2022-0165 -b
        ```
     
<p align="center">
  <b>🚨 Disclaimer</b>
  
</p>
<p align="center">
<b>This tool is created for security bug identification and assistance; Cappricio Securities is not liable for any illegal use. 
  Use responsibly within legal and ethical boundaries. 🔐🛡️</b></p>


## Working PoC Video

[![asciicast](https://blogs.cappriciosec.com/uploaders/Screenshot%202024-05-29%20at%202.07.59%20PM.png)](https://asciinema.org/a/hRPt1UYVR4jINKx2JPdnrqVV8)




## Help menu

#### Get all items

```bash
👋 Hey Hacker
                                                                             v1.0
   _______    ________    ___   ____ ___  ___        ____ ________ ______
  / ____/ |  / / ____/   |__ \ / __ \__ \|__ \      / __ <  / ___// ____/
 / /    | | / / __/________/ // / / /_/ /__/ /_____/ / / / / __ \/___ \
/ /___  | |/ / /__/_____/ __// /_/ / __// __/_____/ /_/ / / /_/ /___/ /
\____/  |___/_____/    /____/\____/____/____/     \____/_/\____/_____/

                              Developed By https://cappriciosec.com


CVE-2022-0165 : Bug scanner for WebPentesters and Bugbounty Hunters 

$ CVE-2022-0165 [option]

Usage: CVE-2022-0165 [options]
```


| Argument | Type     | Description                | Examples |
| :-------- | :------- | :------------------------- | :------------------------- |
| `-u` | `--url` | URL to scan | CVE-2022-0165 -u https://target.com |
| `-i` | `--input` | filename Read input from txt  | CVE-2022-0165 -i target.txt | 
| `-o` | `--output` | filename Write output in txt file | CVE-2022-0165 -i target.txt -o output.txt |
| `-c` | `--chatid` | Creating Telegram Notification | CVE-2022-0165 --chatid yourid |
| `-b` | `--blog` | To Read about CVE-2022-0165 Bug | CVE-2022-0165 -b |
| `-h` | `--help` | Help Menu | CVE-2022-0165 -h |



## 🔗 Links
[![Website](https://img.shields.io/badge/my_portfolio-000?style=for-the-badge&logo=ko-fi&logoColor=white)](https://cappriciosec.com/)
[![linkedin](https://img.shields.io/badge/linkedin-0A66C2?style=for-the-badge&logo=linkedin&logoColor=white)](https://www.linkedin.com/in/karthikeyan--v/)
[![twitter](https://img.shields.io/badge/twitter-1DA1F2?style=for-the-badge&logo=twitter&logoColor=white)](https://twitter.com/karthithehacker)



## Author

- [@karthithehacker](https://github.com/karthi-the-hacker/)



## Feedback

If you have any feedback, please reach out to us at contact@karthithehacker.com
File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Log in to view
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →