CVE-2024-57241 PoC — DesDev DedeCMS 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57241.yaml

Associated Vulnerability

Title:DesDev DedeCMS 安全漏洞 (CVE-2024-57241)
Description:DesDev DedeCMS（织梦内容管理系统）是中国卓卓（DesDev）公司的一套基于PHP的开源内容管理系统（CMS）。该系统具有内容发布、内容管理、内容编辑和内容检索等功能。 DesDev DedeCMS 5.71sp1及之前版本存在安全漏洞，该漏洞源于逻辑错误无法判断输入GET请求，从而导致URL重定向。

Description

Dedecms 5.71sp1 and earlier contain a URL redirect caused by a logic error that does not properly validate GET request input, letting attackers redirect users to arbitrary URLs, exploit requires sending crafted GET requests.

File Snapshot


 id: CVE-2024-57241

info:
  name: DedeCMS - Open Redirect via download.php
  author: 0x_Akoko
  seve

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!