CVE-2017-1000434

Wordpress plugin Furikake version 0.1.0 is vulnerable to an Open Redirect The furikake-redirect parameter on a page allows for a redirect to an attacker controlled page classes/Furigana.php: header('location:'.urldecode($_GET['furikake-redirect']));

• CWE-601

• https://cjc.im/advisories/0008/Exploit, Third Party Advisory
• https://wpvulndb.com/vulnerabilities/8992Third Party Advisory
• https://cjc.im/advisories/0008/Exploit, Third Party Advisory
• https://wpvulndb.com/vulnerabilities/8992Third Party Advisory

Published

Jan 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1000428flatCore-CMS 1.4.6 is vulnerable to reflected XSS in user_ma…
• CVE-2017-1000429rui Li finecms 5.0.10 is vulnerable to a reflected XSS in th…
• CVE-2017-1000430rust-base64 version <= 0.5.1 is vulnerable to a buffer overf…
• CVE-2017-1000431eZ Systems eZ Publish version 5.4.0 to 5.4.9, and 5.3.12 and…
• CVE-2017-1000432Vanilla Forums below 2.1.5 are affected by CSRF leading to D…
• CVE-2017-1000433pysaml2 version 4.4.0 and older accept any password when run…8.1
• CVE-2017-1000435Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-1000436Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-1000437Creolabs Gravity 1.0 contains a stack based buffer overflow …
• CVE-2017-1000438In OMERO 5.3.3 or earlier a user could create an OriginalFil…
• CVE-2017-1000439Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-1000440Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…