Description
RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, or (3) file:// URL.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 2
- RiSearch 0.99 /RiSearch Pro 3.2.6 - show.pl Open Proxy Relay EDB-24326 · remote · Jul 27, 2004 · verified
- RiSearch 0.99 /RiSearch Pro 3.2.6 - show.pl Arbitrary File Access EDB-24327 · remote · Jul 27, 2004 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 8266 vdb-entry
- 10812 vdb-entry
- 20040727 IRM 009: RiSearch and RiSearch ProPro are vulnerable to open FTP/HTTP proxy, directory listings and file disclosure vulnerabilities mailing-list
- 1010788 vdb-entry
- 12173 third-party-advisory
- 8265 vdb-entry
- risearch-show-open-proxy(16817) vdb-entry