.. / CVE-2008-1547

Exploit for Microsoft OWA Exchange Server 2003 - 'redir.asp' Open Redirection (CVE-2008-1547)

Description:

Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2 (aka build 6.5.7638) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter.

Nuclei Template

View the template here CVE-2008-1547.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2008/CVE-2008-1547.yaml
Copy

References:

https://nvd.nist.gov/vuln/detail/CVE-2008-1547
https://www.exploit-db.com/exploits/32489
http://securityreason.com/securityalert/4441
https://github.com/tr3ss/newclei
https://exchange.xforce.ibmcloud.com/vulnerabilities/46061