WPBounce WordPress plugin Open Redirect

2017.11.01

SonnySpooks (US)

Risk: Low

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

-------------------------------------------
  WPBounce WordPress plugin Open Redirect
		   		      By SonnySpooks       
-------------------------------------------
1.             [About App]
-------------------------------------------
 WPBounce is a webapp that displays offers
To users leaving the site to increase sales
               and Traffic. 
-------------------------------------------
2.            [Issue With It]
-------------------------------------------
     The redirector.php file in the
  /AND-AntiBounce/ directory has a param
  "url=" that leaves 100s of sites that
     Use WPBounce easily utilzied for
              Open Redirects
-------------------------------------------
3.         [Replication of attack]
-------------------------------------------
Example: "Site.com/wp-content/plugins/AND-AntiBounce/redirector.php?url="
-------------------------------------------
              ________
             /\       \
            /  \       \
           /    \       \
          /      \_______\
          \      /       /
        ___\    /   ____/___
       /\   \  /   /\       \
      /  \   \/___/  \       \
     /    \       \   \       \
    /      \_______\   \_______\
    \      /       /   /       /
     \    /       /   /       /
      \  /       /\  /       /
       \/_______/  \/_______/    
-------------------------------------------

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

WPBounce WordPress plugin Open Redirect

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.