full-disclosure - [Low-Hanging Fruit] Craigsphone Transcoder Open URL Redirection

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <20090530100136.6BD6620043@smtp.hushmail.com>
Date: Sat, 30 May 2009 03:01:36 -0700
From: "Jeremi Gosney" <epixoip@...h.com>
To: full-disclosure@...ts.grok.org.uk
Subject: [Low-Hanging Fruit] Craigsphone Transcoder Open
	URL Redirection

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Craigsphone is a mobile phone app for viewing and managing
Craigslist pages. It relies on a WAP transcoding service for re-
formatting and serving pages on Craigslist. The transcoder does not
perform any validation on the 'uri' parameter, allowing it to
function as an open redirect.

POC:
http://nextmobileweb.com/craigslist/tr_page?uri=http://www.google.co
m
-----BEGIN PGP SIGNATURE-----
Charset: UTF8
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 3.0

wpwEAQMCAAYFAkohBAAACgkQacHgESW3wZqZUgP/cVREs3jGqhLdJhCEsloWJAdcJ/if
8Y/mxM3Sml+KPdA/TffnY46zaFtuGQ34wrw9g3Mus0e/6NKdEBX8PYaevGNJnMx/4YOX
U8xF7lPT/NUPB7KaOcjCnRthNAGkuc1C5J9MhQt44Psetz+cNOVQEht1XOJPjIIqlGJA
HDVm/do=
=RmL6
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/