Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-33405 | Kitploit
Tools/GitHubGitHub/hacip/cve-2023-33405
Vulnerability AnalysisExploitationWeb Application ExploitationWeb SecurityPenetration Testing
GitHubhacip/cve-2023-33405

CVE-2023-33405

View Repository
13 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-33405

Open Redirection vulnerability identified on BlogEngine.NET CMS (version 3.3.8.0 and earlier)

If a GET request to default.aspx page contains "years=" within the URL, the application calls a function named "Redirect".

1

This function sets several parameters including year, month, date, page and rewrite. Though the date parameter was parsed using the DateTime object, month and year parameters are not getting validated and are being used to construct the rewrite parameter.

2

3

Furthermore, the write and page parameters are getting appended and are being used to redirect the user using HTTP headers.

4

Since, they were not sanitized, encoded or validated, an attacker can leverage this flaw to redirect the users to an attacker controlled-URL.

5

Download Tool