CVE-2009-0347
NUCLEIAutonomy Ultraseek - Open Redirect via cs.html url Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-0347. PoCs published by buzzy, Cappricio-Securities. A Nuclei detection template is also available.
AI-analyzed exploit summary The provided text describes a URI-redirection vulnerability in Autonomy Ultraseek, where unsanitized user input allows redirection to arbitrary URLs. This can be exploited for phishing attacks by crafting a malicious URL.
Description
Open redirect vulnerability in cs.html in the Autonomy (formerly Verity) Ultraseek search engine allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter.
Exploits (2)
The provided text describes a URI-redirection vulnerability in Autonomy Ultraseek, where unsanitized user input allows redirection to arbitrary URLs. This can be exploited for phishing attacks by crafting a malicious URL.
This repository contains a Python-based scanner for detecting CVE-2009-0347, a vulnerability in Microsoft Office Web Components. The tool checks for vulnerable endpoints by sending crafted requests and analyzing responses for specific patterns, such as redirects to a domain controlled by the tool's author.