Open redirect

Open redirect vulnerability in CMSPages/GetDocLink.ashx in Kentico CMS 8.2 through 8.2.41 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the link parameter...

PT-2015-7632

Name of the Vulnerable Software and Affected Versions Kentico CMS versions 8.2 through 8.2.41 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the link parameter in the CMSPages/GetDocLink.ashx endpoint. Recommendatio...

CVE-2015-7823: Undefined Security Weakness

Open redirect vulnerability in CMSPages/GetDocLink.ashx in Kentico CMS 8.2 through 8.2.41 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the link parameter...

Kentico CMS 8.2 Cross Site Scripting / Open Redirect

Web application Kentico CMS 8.2 XSS / Open Redirection The CVE-2015-7823 reference is still waiting my disclosure. The exploit works on 8.2 to 8.2.41 I've contacted the vendor and he fixed the vulnerability in the next major version Vulnerability type: Reflected XSS High The elementguid variable ...

Kentico CMS 8.2.x Multiple Vulnerabilities

Kentico is the only fully integrated ASP.NET CMS, E-commerce, and Online Marketing platform that allows you to create cutting-edge websites, and fully optimize your digital customers’ experiences across multiple channels. Vulnerability type: Reflected XSS High The elementguid variable is vulnerab...