.. / CVE-2008-7269

• Open Redirect
• Nuclei
• Web

Exploit for UC Gateway Investment SiteEngine v5.0 - Open Redirect (CVE-2008-7269)

Description:

Open redirect vulnerability in api.php in SiteEngine 5.x allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter in a logout action.

Nuclei Template

View the template here CVE-2008-7269.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2008/CVE-2008-7269.yaml

References: