Open redirect

2014-10-2314:55:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

84.1%

JSON

Open redirect vulnerability in the Click-Through feature in Newtelligence dasBlog 2.1 (2.1.8102.813), 2.2 (2.2.8279.16125), and 2.3 (2.3.9074.18820) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to ct.ashx.

CPENameOperatorVersion
dasblogeq2.1 2.1.8102.813
dasblogeq2.3 2.3.9074.18820
dasblogeq2.2 2.2.8279.16125

Name	Operator	Version
dasblog	eq	2.1 2.1.8102.813
dasblog	eq	2.3 2.3.9074.18820
dasblog	eq	2.2 2.2.8279.16125

References

packetstormsecurity.com/files/128749/Newtelligence-dasBlog-2.3-Open-Redirect.html

seclists.org/fulldisclosure/2014/Oct/91

www.securityfocus.com/bid/70654

www.tetraph.com/blog/cves/cve-2014-7292-newtelligence-dasblog-open-redirect-vulnerability

exchange.xforce.ibmcloud.com/vulnerabilities/97667