exploit-db-mirror/exploits/asp/webapps/37488.txt
Offensive Security b4c96a5864 DB: 2021-09-03
28807 changes to exploits/shellcodes
2021-09-03 20:19:21 +00:00

10 lines
No EOL
499 B
Text

source: https://www.securityfocus.com/bid/54346/info
WebsitePanel is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input.
A successful exploit may aid in phishing attacks; other attacks are possible.
WebsitePanel versions prior to 1.2.2.1 are vulnerable.
https://www.example.com/hosting/Default.aspx?pid=Login&ReturnUrl=http://<any_domain>
https://www.example1.com/hosting/Default.aspx?pid=Login&ReturnUrl=http://<any_domain>/file.exe>