CVE-2015-5461 PoC — WordPress StageShow插件开放重定向漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5461.yaml

Associated Vulnerability

Title:WordPress StageShow插件开放重定向漏洞 (CVE-2015-5461)
Description:WordPress StageShow插件5.0.9之前版本的stageshow_redirect.php脚本中的Redirect功能中存在开放重定向漏洞。远程攻击者可借助‘url’参数中的URL利用该漏洞将用户重定向到任意Web站点，实施钓鱼攻击。

Description

WordPress StageShow plugin before 5.0.9 contains an open redirect vulnerability in the Redirect function in stageshow_redirect.php. A remote attacker can redirect users to arbitrary web sites and conduct phishing attacks via a malicious URL in the url parameter.

File Snapshot


 id: CVE-2015-5461

info:
  name: WordPress StageShow <5.0.9 - Open Redirect
  author: 0x_Akoko
  sev

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!