CVE-2004-2061
CRITICALRiSearch and RiSearch Pro - Server-Side Request Forgery via show.pl URL Parameter
Title source: manualExploitation Summary
EIP tracks 2 public exploits for CVE-2004-2061. PoCs published by Phil Robinson.
AI-analyzed exploit summary The exploit demonstrates an open proxy vulnerability in RiSearch and RiSearch Pro due to insufficient sanitization of user-supplied URI parameters. Attackers can leverage this to proxy requests to internal or external services, potentially leading to SSRF attacks.
Description
RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, or (3) file:// URL.
Exploits (2)
The exploit demonstrates an open proxy vulnerability in RiSearch and RiSearch Pro due to insufficient sanitization of user-supplied URI parameters. Attackers can leverage this to proxy requests to internal or external services, potentially leading to SSRF attacks.
The exploit describes an open proxy vulnerability in RiSearch and RiSearch Pro due to insufficient sanitization of URI parameters, allowing an attacker to access local files or launch attacks against other services. The provided example demonstrates a path traversal to read '/etc/passwd'.
References (7)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H