.. / CVE-2017-11586

Exploit for FineCMS <5.0.9 - Open Redirect (CVE-2017-11586)

Description:

FineCMS 5.0.9 contains an open redirect vulnerability via the url parameter in a sync action. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.

Nuclei Template

View the template here CVE-2017-11586.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2017/CVE-2017-11586.yaml
Copy

References:

https://nvd.nist.gov/vuln/detail/CVE-2017-11586
http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#URL-Redirector-Abuse