ASP-Nuke 2.0.7 - Open Redirect Vulnerability in gotourl

vendor:

ASP-Nuke

by:

Felipe Andrian Peixoto

3,3

CVSS

LOW

Open Redirect

601

CWE

Product Name: ASP-Nuke

Affected Version From: 2.0.7

Affected Version To: 2.0.7

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows 7 and Linux

2014

ASP-Nuke 2.0.7 – Open Redirect Vulnerability in gotourl

An open redirect is an application that takes a parameter and redirects a user to the parameter value without any validation. This vulnerability is used in phishing attacks to get users to visit malicious sites without realizing it.

Mitigation:

Validate the URL before redirecting the user to it.

Source

Exploit-DB raw data:

[+] ASP-Nuke 2.0.7 - Open Redirect Vulnerability in gotourl
[+] Date: 28/03/2014
[+] Risk: Low
[+] Remote: Yes
[+] Author: Felipe Andrian Peixoto
[+] Vendor Homepage: http://www.aspnuke.it/
[+] Contact: felipe_andrian@hotmail.com
[+] Tested on: Windows 7 and Linux
[+] Vulnerable File: gotourl.asp
[+] Version: ASP-Nuke 2.0.7
[+] Exploit : http://host/gotoURL.asp?url=[ Open Redirect Vul ]&id=43569 

Note : An open redirect is an application that takes a parameter and redirects a user to the parameter value without any validation. 
This vulnerability is used in phishing attacks to get users to visit malicious sites without realizing it.
Reference :https://www.owasp.org/index.php/Open_redirect