EDB-32834
functionalcURL/libcURL 7.19.3 - HTTP 'Location:' Redirect Security Bypass
view exploit source exploit_dbverifiedtype remoteauthor David Kierznowskipublished 2009-03-03catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2009-0037US | medium6.8 | Exploit | ||
The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP server… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan