WordPress Multiple URI Redirection Vulnerabilities
BID:64456
Info
WordPress Multiple URI Redirection Vulnerabilities
| Bugtraq ID: | 64456 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 19 2013 12:00AM |
| Updated: | Dec 19 2013 12:00AM |
| Credit: | MustLive |
| Vulnerable: |
WordPress WordPress 3.6 |
| Not Vulnerable: |
WordPress WordPress 3.6.1 |
Discussion
WordPress Multiple URI Redirection Vulnerabilities
WordPress is prone to multiple remote URI-redirection vulnerabilities.
An attacker can leverage these issues by constructing a URI that includes a malicious site redirection. When an unsuspecting victim follows the URI, they may be redirected to an attacker-controlled site; this may aid in phishing attacks.
WordPress 3.6 is vulnerable; other versions may also be affected.
WordPress is prone to multiple remote URI-redirection vulnerabilities.
An attacker can leverage these issues by constructing a URI that includes a malicious site redirection. When an unsuspecting victim follows the URI, they may be redirected to an attacker-controlled site; this may aid in phishing attacks.
WordPress 3.6 is vulnerable; other versions may also be affected.
Exploit / POC
WordPress Multiple URI Redirection Vulnerabilities
An attacker can exploit these issues by enticing an unsuspecting victim into following a malicious URI.
An attacker can exploit these issues by enticing an unsuspecting victim into following a malicious URI.