Skip to content
Nuclei Templates

Novius OS 5.0.1-elche - Open Redirect

ID: CVE-2015-5354

Severity: medium

Author: 0x_Akoko

Tags: cve2015,cve,packetstorm,redirect,novius,novius-os,xss

Description

Section titled “Description”

Novius OS 5.0.1 (Elche) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to admin/nos/login.

YAML Source

Section titled “YAML Source”
id: CVE-2015-5354


info:
  name: Novius OS 5.0.1-elche - Open Redirect
  author: 0x_Akoko
  severity: medium
  description: Novius OS 5.0.1 (Elche) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to admin/nos/login.
  impact: |
    An attacker can exploit this vulnerability to redirect users to malicious websites, leading to phishing attacks or the download of malware.
  remediation: |
    Apply the latest security patches or upgrade to a newer version of Novius OS.
  reference:
    - https://packetstormsecurity.com/files/132478/Novius-OS-5.0.1-elche-XSS-LFI-Open-Redirect.html
    - https://vuldb.com/?id.76181
    - http://packetstormsecurity.com/files/132478/Novius-OS-5.0.1-elche-XSS-LFI-Open-Redirect.html
    - https://nvd.nist.gov/vul n/detail/CVE-2015-5354
    - https://www.exploit-db.com/exploits/37439/
  classification:
    cvss-metrics: CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:N
    cvss-score: 5.8
    cve-id: CVE-2015-5354
    cwe-id: CWE-601
    epss-score: 0.00166
    epss-percentile: 0.53247
    cpe: cpe:2.3:a:novius-os:novius_os:5.0.1:*:*:*:*:*:*:*
  metadata:
    max-request: 1
    vendor: novius-os
    product: novius_os
  tags: cve2015,cve,packetstorm,redirect,novius,novius-os,xss


http:
  - method: GET
    path:
      - '{{BaseURL}}/novius-os/admin/nos/login?redirect=http://interact.sh'


    matchers:
      - type: regex
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$' # https://regex101.com/r/L403F0/1
# digest: 490a0046304402205cfa890f724d500adf4289c6591ffac7e28d1a9446f65ff6f57aa626959d2eef02206ca1f76d1d05c45ca6792032c8bba97745bc99e10c053ae47b80e69d6c6fada0:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/cves/2015/CVE-2015-5354.yaml"

View on Github