Lucene search
K

CVE-2015-7822

🗓️ 21 Oct 2015 15:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 48 Views🌐 WEB

CVE-2015-7822 Multiple XSS vulnerabilities in Kentico CMS 8.

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
CNVD
Kentico CMS Has Multiple Cross-Site Scripting Vulnerabilities
22 Oct 201500:00
cnvd
Cvelist
CVE-2015-7822
21 Oct 201515:00
cvelist
EUVD
EUVD-2015-7720
7 Oct 202500:30
euvd
Tenable Nessus
Kentico CMS < 8.2.42 Multiple Vulnerabilities
7 Oct 202000:00
nessus
Tenable Nessus
Kentico CMS < 9.0.51 Cross-Site Scripting
3 Apr 202000:00
nessus
NVD
CVE-2015-7822
21 Oct 201515:59
nvd
Packet Storm
Kentico CMS 8.2 Cross Site Scripting / Open Redirect
15 Oct 201500:00
packetstorm
Prion
Cross site scripting
21 Oct 201515:59
prion
NVD
Node
ParameterPositionPathDescriptionCWE
elementguidquery paramKentico82/CMSModules/AdminControls/Pages/UIPage.aspxReflected XSS via parameter name elementguid in UIPage.aspxCWE-79
viewmodequery paramKentico82/?viewmode=livesiteReflected XSS via CMSBodyClass cookie payload delivered through cookie; PoC uses viewmode livesite pathCWE-79
linkquery paramKentico82/CMSPages/GetDocLink.ashxOpen Redirect vulnerability via link parameter (PoC uses external URL)CWE-79
CMSBodyClassheaderKentico82/Reflected XSS via CMSBodyClass cookie variable set in Cookie headerCWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation