YOOtheme Pagekit CMS Multiple Vulnerabilities

Pagekit CMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-8069

Multiple cross-site scripting XSS vulnerabilities in YOOtheme Pagekit CMS 0.8.7 allow remote attackers to inject arbitrary web script or HTML via the 1 HTTP Referer header to index.php/user or 2 PATHINFO to index.php...

CVE-2014-8070

Open redirect vulnerability in YOOtheme Pagekit CMS 0.8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to index.php/user/logout...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in YOOtheme Pagekit CMS 0.8.7 allow remote attackers to inject arbitrary web script or HTML via the 1 HTTP Referer header to index.php/user or 2 PATHINFO to index.php...

Open redirect

Open redirect vulnerability in YOOtheme Pagekit CMS 0.8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to index.php/user/logout...

CVE-2014-8070

Pagekit CMS 0.8.7 is affected by CVE-2014-8070, an open redirect vulnerability. A crafted value in the redirect parameter to index.php/user/logout can redirect users to arbitrary sites, enabling phishing via trust manipulation. The OpenVAS/NVD entries corroborate a cross-site redirect risk and th...

CVE-2014-8069

CVE-2014-8069 affects YOOtheme Pagekit CMS 0.8.7. Multiple reflected XSS vulnerabilities allow remote attackers to inject arbitrary script/HTML via the HTTP Referer header to index.php/user or via PATH_INFO to index.php. Affected component is Pagekit’s index.php handling; root cause is improper v...

CVE-2014-8070

Open redirect vulnerability in YOOtheme Pagekit CMS 0.8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to index.php/user/logout...

PT-2014-8394

Name of the Vulnerable Software and Affected Versions YOOtheme Pagekit CMS version 0.8.7 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. This is achieved by manipulating a URL in the redirect parameter to index.php/user/logout...

CVE-2014-8070: Undefined Security Weakness

Open redirect vulnerability in YOOtheme Pagekit CMS 0.8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to index.php/user/logout...

PT-2014-8393

Name of the Vulnerable Software and Affected Versions YOOtheme Pagekit CMS version 0.8.7 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. This can be achieved via the HTTP Referer...

CVE-2014-8069: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in YOOtheme Pagekit CMS 0.8.7 allow remote attackers to inject arbitrary web script or HTML via the 1 HTTP Referer header to index.php/user or 2 PATHINFO to index.php...