6 matches found
CVE-2012-1301
The FeedProxy.aspx script in Umbraco 4.7.0 allows remote attackers to proxy requests on their behalf via the "url" parameter...
Design/Logic Flaw
The FeedProxy.aspx script in Umbraco 4.7.0 allows remote attackers to proxy requests on their behalf via the "url" parameter...
CVE-2012-1301
The FeedProxy.aspx script in Umbraco 4.7.0 allows remote attackers to proxy requests on their behalf via the "url" parameter...
CVE-2012-1301
The CVE-2012-1301 vulnerability affects Umbraco 4.7.0 where the FeedProxy.aspx script can be abused to proxy arbitrary requests via the url parameter, enabling an open-proxy condition. The root cause is improper handling of the url parameter in FeedProxy.aspx, allowing unauthenticated remote use ...
PT-2017-5081
Name of the Vulnerable Software and Affected Versions: Umbraco version 4.7.0 Description: The issue allows remote attackers to proxy requests on their behalf. This is achieved via the url parameter in the FeedProxy.aspx script. Recommendations: For Umbraco version 4.7.0, consider restricting acce...
