| शीर्षक | PHPGurukul COVID-19 Testing Management System 2021 version Open Redirection |
|---|
| विवरण | The search-report-result.php endpoint of the COVID-19 Testing Management System is vulnerable to open redirection. The application accepts a user-supplied URL parameter and redirects users without proper validation. This allows attackers to craft malicious URLs that redirect victims to external, potentially malicious websites.
Affected Endpoint:
/search-report-result.php?q=https://example.com
Impact:
An attacker can:
Redirect users to phishing pages or malware-infected sites
Exploit the trust of the original domain (used in phishing attacks)
Bypass redirect-based access control or filtering mechanisms
Fix Recommendation:
Validate redirect URLs against a whitelist of allowed domains
Reject or sanitize external URLs
Use relative paths for internal redirection |
|---|
| स्रोत | ⚠️ https://targetsite.com/search-report-result.php |
|---|
| उपयोगकर्ता | Anzil (UID 86393) |
|---|
| सबमिशन | 10/06/2025 09:06 AM (1 वर्ष पहले) |
|---|
| संयम | 19/06/2025 09:22 AM (9 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 313290 [PHPGurukul COVID19 Testing Management System 2021 search-report-result.php q Redirect] |
|---|
| अंक | 17 |
|---|