651 matches found
CVE-2021-27581
The Blog module in Kentico CMS 5.5 R2 build 5.5.3996 allows SQL injection via the tagname parameter...
Sql injection
The Blog module in Kentico CMS 5.5 R2 build 5.5.3996 allows SQL injection via the tagname parameter...
CVE-2021-27581
The Blog module in Kentico CMS 5.5 R2 build 5.5.3996 allows SQL injection via the tagname parameter...
CVE-2021-27581
The Blog module in Kentico CMS 5.5 R2 build 5.5.3996 allows SQL injection via the tagname parameter...
CVE-2021-27581
The CVE-2021-27581 entry concerns Kentico CMS 5.5 R2 (build 5.5.3996) Blog module, where a SQL injection is possible via the tagname parameter. The root cause is a vulnerable SQL construction in the Blog module that allows an attacker to interact with the back-end database, including data access/...
CVE-2021-27581: Improper Neutralization of Special Elements used in an SQL Command
The Blog module in Kentico CMS 5.5 R2 build 5.5.3996 allows SQL injection via the tagname parameter...
PT-2021-17520
Name of the Vulnerable Software and Affected Versions Kentico CMS version 5.5 R2 build 5.5.3996 Description The issue concerns SQL injection via the tagname parameter in the Blog module. This allows for potential exploitation. Recommendations For Kentico CMS version 5.5 R2 build 5.5.3996, conside...
Kentico SQL注入漏洞
Kentico is an all-in-one ASP.NET CMS that fully integrates Web content management, e-commerce, online marketing and intranet into one platform. A SQL injection vulnerability exists in the Blog module in Kentico 5.5 R2 build 5.5.3996. The vulnerability can be exploited by an attacker via the tagna...
Kentico CMS 9.0-12.0.49 Cross Site Scripting
Exploit Title: Kentico CMS 9.0-12.0.49 - Persistent Cross Site Scripting Exploit Author: Ataberk YAVUZER CVE: CVE-2019-19493 Type: Webapps Vendor Homepage: https://www.kentico.com/ Version: 9.0-12.0.49 Date: 29-11-2019 CVE Details: https://nvd.nist.gov/vuln/detail/CVE-2019-19493 Details Persisten...
Kentico CMS 9.0-12.0.49 - Persistent Cross Site Scripting
Exploit Title: Kentico CMS 9.0-12.0.49 - Persistent Cross Site Scripting Exploit Author: Ataberk YAVUZER CVE: CVE-2019-19493 Type: Webapps Vendor Homepage: https://www.kentico.com/ Version: 9.0-12.0.49 Date: 29-11-2019 CVE Details: https://nvd.nist.gov/vuln/detail/CVE-2019-19493 Details Persisten...
Kentico CMS 9.x / 10.x < 10.0.52 / 11.x < 11.0.48 / 12.x < 12.0.15 RCE
According to its self-reported version number, the version of Kentico CMS on the remote host is 9.x, 10.x prior to 10.0.52, 11.x prior to 11.0.48, or 12.x prior to 12.0.15. It is, therefore, affected by a remote code execution vulnerability. Due to a failure to validate security headers, it is...
Kentico CMS < 12.0.50 XSS
According to its self-reported version number, the version of Kentico CMS on the remote host is prior to 12.0.50. It is, therefore, affected by a cross-site scripting XSS vulnerability due to the Content-Type header being inconsistent with the file extension. An unauthenticated, remote attacker c...
Kentico CMS < 8.2.42 Multiple Vulnerabilities
According to its self-reported version number, the version of Kentico CMS on the remote host is prior to 8.2.42. It is, therefore, affected by multiple vulnerabilities : - Multiple cross-site scripting XSS vulnerabilities exist in the UIPage.aspx parameter name and the CMSBodyClass cookie variabl...
Kentico CMS 10.x < 10.0.50 / 11.x < 11.0.3 Multiple Vulnerabilities
According to its self-reported version number, the version of Kentico CMS on the remote host is 10.x prior to 10.0.50 or 11.x prior to 11.0.3. It is, therefore, affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability exists due to improper validation of user-supplied inp...
Kentico CMS < 11.0.45 Unrestricted Upload
According to its self-reported version number, the version of Kentico CMS on the remote host is prior to 11.0.45. It is, therefore, affected by an unrestricted upload flaw. An unauthenticated, remote attacker can exploit this, by uploading specially-crafted files with dangerous file types, to...
Kentico Cross-Site Scripting Vulnerability (CNVD-2020-52038)
Kentico is the United States Kentico company's set of ASP.NET-based content management system CMS. A cross-site scripting vulnerability exists in Kentico prior to version 12.0.75, which stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this...
Kentico CMS < 12.0.75 XSS Vulnerability
Kentico CMS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:kentico:kentico...
Cross-Site Scripting (XSS)
Kentico is vulnerable to cross-site scripting XSS. The vulnerability exists as an unsanitized user-provided input can be executed in the system's page...
