Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%

CVE-2012-5321 PoC — Tiki Wiki CMS Groupware ‘url’ 参数URI重定向漏洞

Source
Associated Vulnerability
Title:Tiki Wiki CMS Groupware ‘url’ 参数URI重定向漏洞 (CVE-2012-5321)
Description:tiki-featured_link.php in TikiWiki CMS/Groupware 8.3 allows remote attackers to load arbitrary web site pages into frames and conduct phishing attacks via the url parameter, aka "frame injection."
Description
TikiWiki CMS Groupware v8.3 - Open Redirect
Readme

<div align="center">
  <img src="https://blogs.cappriciosec.com/uploaders/CVE-2012-5321-tool.png" alt="logo">
</div>


## Badges



[![MIT License](https://img.shields.io/badge/License-MIT-green.svg)](https://choosealicense.com/licenses/mit/)
![PyPI - Version](https://img.shields.io/pypi/v/CVE-2012-5321)
![PyPI - Downloads](https://img.shields.io/pypi/dm/CVE-2012-5321)
![GitHub all releases](https://img.shields.io/github/downloads/Cappricio-Securities/CVE-2012-5321/total)
<a href="https://github.com/Cappricio-Securities/CVE-2012-5321/releases/"><img src="https://img.shields.io/github/release/Cappricio-Securities/CVE-2012-5321"></a>![Profile_view](https://komarev.com/ghpvc/?username=Cappricio-Securities&label=Profile%20views&color=0e75b6&style=flat)
[![Follow Twitter](https://img.shields.io/twitter/follow/cappricio_sec?style=social)](https://twitter.com/cappricio_sec)
<p align="center">

<p align="center">







## License

[MIT](https://choosealicense.com/licenses/mit/)



## Installation 

1. Install Python3 and pip [Instructions Here](https://www.python.org/downloads/) (If you can't figure this out, you shouldn't really be using this)

   - Install via pip
     - ```bash
          pip install CVE-2012-5321 
        ```
   - Run bellow command to check
     - `CVE-2012-5321 -h`

## Configurations 
2. We integrated with the Telegram API to receive instant notifications for vulnerability detection.
   
   - Telegram Notification
     - ```bash
          CVE-2012-5321 --chatid <YourTelegramChatID>
        ```
   - Open your telegram and search for [`@CappricioSecuritiesTools_bot`](https://web.telegram.org/k/#@CappricioSecuritiesTools_bot) and click start

## Usages 
3. This tool has multiple use cases.
   
   - To Check Single URL
     - ```bash
          CVE-2012-5321 -u http://example.com 
        ```
   - To Check List of URL 
      - ```bash
          CVE-2012-5321 -i urls.txt 
        ```
   - Save output into TXT file
      - ```bash
          CVE-2012-5321 -i urls.txt -o out.txt
        ```
   - Want to Learn about [`CVE-2012-5321`](https://blogs.cappriciosec.com/cve/196/TikiWiki%20Paradise%20Lost%20-%20The%20RCE%20Vulnerability%20(CVE-2012-5321)%20and%20Charting%20a%20Course%20for%20Secure%20Collaboration)? Then Type Below command
      - ```bash
          CVE-2012-5321 -b
        ```
     
<p align="center">
  <b>🚨 Disclaimer</b>
  
</p>
<p align="center">
<b>This tool is created for security bug identification and assistance; Cappricio Securities is not liable for any illegal use. 
  Use responsibly within legal and ethical boundaries. 🔐🛡️</b></p>


## Working PoC Video

[![asciicast](https://blogs.cappriciosec.com/uploaders/Screenshot%202024-06-21%20at%202.01.11%20PM.png)](https://asciinema.org/a/72RWh475RGqTgDpWNPME2vhKK)

## Help menu

#### Get all items

```bash

👋 Hey Hacker
                                                                             v1.0
   _______    ________    ___   ____ ______        ______________  ___
  / ____/ |  / / ____/   |__ \ / __ <  /__ \      / ____/__  /__ \<  /
 / /    | | / / __/________/ // / / / /__/ /_____/___ \  /_ <__/ // /
/ /___  | |/ / /__/_____/ __// /_/ / // __/_____/___/ /___/ / __// /
\____/  |___/_____/    /____/\____/_//____/    /_____//____/____/_/

                              Developed By https://cappriciosec.com


CVE-2012-5321 : Bug scanner for WebPentesters and Bugbounty Hunters

$ CVE-2012-5321 [option]

Usage: CVE-2012-5321 [options]
```


| Argument | Type     | Description                | Examples |
| :-------- | :------- | :------------------------- | :------------------------- |
| `-u` | `--url` | URL to scan | CVE-2012-5321 -u https://target.com |
| `-i` | `--input` | filename Read input from txt  | CVE-2012-5321 -i target.txt | 
| `-o` | `--output` | filename Write output in txt file | CVE-2012-5321 -i target.txt -o output.txt |
| `-c` | `--chatid` | Creating Telegram Notification | CVE-2012-5321 --chatid yourid |
| `-b` | `--blog` | To Read about CVE-2012-5321 Bug | CVE-2012-5321 -b |
| `-h` | `--help` | Help Menu | CVE-2012-5321 -h |



## 🔗 Links
[![Website](https://img.shields.io/badge/my_portfolio-000?style=for-the-badge&logo=ko-fi&logoColor=white)](https://cappriciosec.com/)
[![linkedin](https://img.shields.io/badge/linkedin-0A66C2?style=for-the-badge&logo=linkedin&logoColor=white)](https://www.linkedin.com/in/karthikeyan--v/)
[![twitter](https://img.shields.io/badge/twitter-1DA1F2?style=for-the-badge&logo=twitter&logoColor=white)](https://twitter.com/karthithehacker)



## Author

- [@karthithehacker](https://github.com/karthi-the-hacker/)



## Feedback

If you have any feedback, please reach out to us at contact@karthithehacker.com
File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Log in to view
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →