Famo Go Script Unvalidated Redirect and Forwards Vulnerability

2018.01.21

IRANIAN ETHICAL HACKERS (IR)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

[+] Exploit Title ; Famo Go Script Unvalidated Redirect and Forwards Vulnerability
[+] Date : 2018-01-21
[+] Author : 0P3N3R From IRANIAN ETHICAL HACKERS
[+] Vendor Homepage : https://famo.ir
[+] Dork : N/A
[+] Version :
[+] Tested On : windows 10 - kali linux 2.0
[+] Contact : https://telegram.me/WebServer
[+] Poc :
[*] http://localhost/index.php?url=http://irethicalhackers.com/forums
[*] The hacker can change this link !
[+] Exploitation Technique:
[!] remote
[+] Severity Level:
[!] Medium
[+] Vulnerable source :
<?php
error_reporting(7);
if(isset($_REQUEST['url'])) {
$go = "go.php?url=".$_REQUEST['url'];
} else {
$go = "go.php";
}
?>
[+] We Are :
[!] 0P3N3R [+] Mehrdad_Ice [+] BaxTurk24

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Famo Go Script Unvalidated Redirect and Forwards Vulnerability

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.