Lucene search
K

WolfCMS 0.8.3.1 Open Redirect

🗓️ 09 Apr 2018 00:00:00Reported by Sureshbabu NarvaneniType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 43 Views

WolfCMS 0.8.3.1 Open Redirect vulnerability, allows remote attackers to conduct phishing attacks via a malformed UR

Related
Code
ReporterTitlePublishedViews
Family
0day.today
WolfCMS 0.8.3.1 - Cross Site Request Forgery / Open Redirection Vulnerabilities
9 Apr 201800:00
zdt
ATTACKERKB
CVE-2018-8813
4 Apr 201815:29
attackerkb
CNVD
WolfCMS Open Redirect Vulnerability
9 Apr 201800:00
cnvd
CVE
CVE-2018-8813
4 Apr 201815:00
cve
Cvelist
CVE-2018-8813
4 Apr 201815:00
cvelist
Exploit DB
WolfCMS 0.8.3.1 - Open Redirection
9 Apr 201800:00
exploitdb
EUVD
EUVD-2018-20422
7 Oct 202500:30
euvd
exploitpack
WolfCMS 0.8.3.1 - Open Redirection
9 Apr 201800:00
exploitpack
NVD
CVE-2018-8813
4 Apr 201815:29
nvd
Prion
Open redirect
4 Apr 201815:29
prion
Rows per page
`#######################################  
# Exploit Title: WolfCMS 0.8.3.1 Open Redirection Vulnerability  
# Google Dork: N/A  
# Date: 04-04-2018  
#######################################  
# Exploit Author: Sureshbabu Narvaneni#  
#######################################  
# Author Blog : http://nullnews.in  
# Vendor Homepage: http://www.wolfcms.org  
# Software Link: https://bitbucket.org/wolfcms/wolf-cms-downloads/downloads/wolfcms-0.8.3.1.zip  
# Affected Version: 0.8.3.1  
# Category: WebApps  
# Tested on: Win7 Enterprise x86/Kali Linux 4.12 i686  
# CVE : CVE-2018-8813  
#  
# 1. Vendor Description:  
#  
# Light-weight, fast, simple and powerful CMS. PHP-based, easily extended CMS. Uses MySQL, SQLite or (from 0.7)  
# PostgreSQL for db. Simple drag & drop page hierarchy. Open source, licensed under GPLv3.  
#  
# 2. Technical Description:  
#  
# Open redirect vulnerability in the login[redirect] parameter login  
functionality in WolfCMS before 0.8.3.1 allows  
# remote attackers to redirect users to arbitrary web sites and conduct  
phishing attacks via a malformed URL.  
#  
# 3. Proof Of Concept:  
#  
# Navigate to http://[URL]/wolfcms/?/admin/login  
# Enter the credentials and replace login[redirect] to any url.  
# You can see the unvalidated redirect.  
#  
# 4. Solution:  
#  
# Upgrade to latest release.  
# http://www.wolfcms.org/blog.html  
#  
# 5. Reference:  
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8813  
# https://github.com/wolfcms/wolfcms/issues/670  
#####################################  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

09 Apr 2018 00:00Current
5.2Medium risk
Vulners AI Score5.2
EPSS0.01443
43