CVE-2012-4032 PoC — WebsitePanel‘ReturnUrl’参数URL重定向漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4032.yaml

Associated Vulnerability

Title:WebsitePanel‘ReturnUrl’参数URL重定向漏洞 (CVE-2012-4032)
Description:WebsitePane中存在URL重定向漏洞，该漏洞源于对用户提供的输入未经正确验证。攻击者利用该漏洞有助于钓鱼攻击，也可能存在其他攻击。WebsitePanel早期版本至1.2.2.1版本中存在漏洞。

Description

Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in ReturnUrl to Default.aspx

File Snapshot


 id: CVE-2012-4032

info:
  name: WebsitePanel before v1.2.2.1 - Open Redirect
  author: ctflearner
 

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!