cve/2020/CVE-2020-22840.md

CVE-2020-22840

Description

Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redirects to an attacker controlled resource via redirect_to parameter in email_passthrough.php.

POC

Reference

• http://packetstormsecurity.com/files/161362/b2evolution-CMS-6.11.6-Open-Redirection.html
• http://packetstormsecurity.com/files/161362/b2evolution-CMS-6.11.6-Open-Redirection.html
• https://www.exploit-db.com/exploits/49554
• https://www.exploit-db.com/exploits/49554

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/Elsfa7-110/kenzer-templates
• https://github.com/d4n-sec/d4n-sec.github.io