GetSimplecms has an arbitrary URL redirection vulnerability

1.GetSimple Version：3.4.0a

2.Download address:

3.Vulnerability type: Any website redirects

4.Visit the background login page：

/admin/index.php?redirect=snippets.php?

5.Change the URL as follows:

/admin/index.php? redirect=http://www.baidu.com

6.Use the correct account and password to log in to the background. After the login succeeds, the system will jump to any URL

Navigation Menu