CVE-2012-6499
NUCLEIAge Verification < 0.4 - Open Redirect via redirect_to Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-6499. PoCs published by Gianluca Brindisi. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates an open redirect vulnerability in the WordPress Age Verification plugin <= 0.4. It allows attackers to redirect users to arbitrary URLs via GET or POST requests, potentially facilitating phishing or other malicious activities.
Description
Open redirect vulnerability in age-verification.php in the Age Verification plugin 0.4 and earlier for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_to parameter.
Exploits (2)
This exploit demonstrates an open redirect vulnerability in the WordPress Age Verification plugin <= 0.4. It allows attackers to redirect users to arbitrary URLs via GET or POST requests, potentially facilitating phishing or other malicious activities.
The exploit describes a URI-redirection vulnerability in the WordPress Age Verification plugin due to improper input sanitization. An attacker can craft a malicious URL to redirect users to an arbitrary site, aiding in phishing attacks.