Exploit for Canto <= 1.7.0 - Unauthenticated Blind SSRF

wpexploit · 2020-11-30

Description

Unauthenticated Blind SSRF in Canto 1.7.

Parametersubdomain · query param

Pathwp-content/plugins/canto/includes/lib/detail.php?subdomain=

Blind SSRF via subdomain parameter in detail.php

Canto= 1.3.0

5.0

MEDIUM SEVERITY

VectorAV:N/AC:L/Au:N/C:P/I:N/A:N

27.8%higher than 97.9% of all CVEs

Updated 2026-08-26

Modified:2020-12-02 06:02

Last Seen:2021-02-15 22:10

Reporter:wpvulndb

MARKDOWN2 lines

## https://sploitus.com/exploit?id=WPEX-ID:29C89CC9-AD9F-4086-A762-8896EBA031C6
The PoC will be displayed once the issue has been remediated