.. / CVE-2012-6499

Exploit for WordPress Plugin Age Verification v0.4 - Open Redirect (CVE-2012-6499)

Description:

Open redirect vulnerability in age-verification.php in the Age Verification plugin 0.4 and earlier for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_to parameter.

Nuclei Template

View the template here CVE-2012-6499.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2012/CVE-2012-6499.yaml
Copy

References:

https://www.exploit-db.com/exploits/18350
https://wordpress.org/plugins/age-verification
https://nvd.nist.gov/vuln/detail/CVE-2012-6499