diff --git a/vulnerabilities/open_redirect/source/high.php b/vulnerabilities/open_redirect/source/high.php index 349e673c1..89cf33583 100644 --- a/vulnerabilities/open_redirect/source/high.php +++ b/vulnerabilities/open_redirect/source/high.php @@ -1,21 +1,16 @@ -

You can only redirect to the info page.

- -

Missing redirect target.

- diff --git a/vulnerabilities/open_redirect/source/impossible.php b/vulnerabilities/open_redirect/source/impossible.php index 28f245fe9..4bd548652 100644 --- a/vulnerabilities/open_redirect/source/impossible.php +++ b/vulnerabilities/open_redirect/source/impossible.php @@ -1,29 +1,23 @@ "info.php?id=1", + 2 => "info.php?id=2", + 99 => "https://digi.ninja", +]; -if (array_key_exists ("redirect", $_GET) && is_numeric($_GET['redirect'])) { - switch (intval ($_GET['redirect'])) { - case 1: - $target = "info.php?id=1"; - break; - case 2: - $target = "info.php?id=2"; - break; - case 99: - $target = "https://digi.ninja"; - break; - } - if ($target != "") { - header ("location: " . $target); - exit; - } else { - ?> - Unknown redirect target. - -Missing redirect target. diff --git a/vulnerabilities/open_redirect/source/low.php b/vulnerabilities/open_redirect/source/low.php index 6c4836cab..0fd2d16fd 100644 --- a/vulnerabilities/open_redirect/source/low.php +++ b/vulnerabilities/open_redirect/source/low.php @@ -1,13 +1,11 @@ -

Missing redirect target.

- diff --git a/vulnerabilities/open_redirect/source/medium.php b/vulnerabilities/open_redirect/source/medium.php index b27ac5beb..48fc3f25e 100644 --- a/vulnerabilities/open_redirect/source/medium.php +++ b/vulnerabilities/open_redirect/source/medium.php @@ -1,11 +1,9 @@ -

Absolute URLs not allowed.

- -

Missing redirect target.

-