New Method - Virtual Tour krpano

AzizPro

Regular Member
Joined
Mar 28, 2021
Messages
281
Reaction score
164
Does anyone know this method?

Code:
https://e.huawei.com/topic/2023-demo-education-swu-en/index.html?xml=https://cp.wis-masters.com&id=mno_00634#/
 
It appears to be a vulnerability somewhere, probably a javascript library. If you look at the xml= parameter in the url, it's pointing to a url on a third party site. This url doesn't give anything when you access it directly, but with a bit of probing you can get it to spit out some json:
Code:
{"redirectUrl":"https:\/\/xxxxxx.com\/short.php?url=xxxxxx"}
Which is obviously the vector being used to create the redirect.

Looks like there are many of these around, functioning kinda like the fckeditor exploit.
 
A few days ago, I accidentally discovered that krpano could suddenly be indexed again. I tested and included hundreds of pages, but Google did not rank them.
Yes, it is a new indexing method that indexes them, but despite that, they are not rank by Google.
 
Back
Top