CVE-2025-36845 PoC — Eveo URVE Web Manager 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-36845.yaml

Associated Vulnerability

Title:Eveo URVE Web Manager 安全漏洞 (CVE-2025-36845)
Description:Eveo URVE Web Manager是波兰Eveo公司的一个数字标牌管理平台。 Eveo URVE Web Manager 27.02.2025版本存在安全漏洞，该漏洞源于端点/_internal/redirect.php允许服务器端请求伪造。

Description

Eveo URVE Web Manager 27.02.2025 contains a server-side request forgery caused by improper validation of URL input in /_internal/redirect.php, letting attackers make requests to internal endpoints, exploit requires crafted URL input.

File Snapshot


 id: CVE-2025-36845

info:
  name: Eveo URVE Web Manager - Server-Side Request Forgery
  author: Dhiy

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!