Design/Logic Flaw

The FeedProxy.aspx script in Umbraco 4.7.0 allows remote attackers to proxy requests on their behalf via the "url" parameter...

CVE-2012-1301

The FeedProxy.aspx script in Umbraco 4.7.0 allows remote attackers to proxy requests on their behalf via the "url" parameter...

CVE-2012-1301

The FeedProxy.aspx script in Umbraco 4.7.0 allows remote attackers to proxy requests on their behalf via the "url" parameter...

CVE-2012-1301

The CVE-2012-1301 vulnerability affects Umbraco 4.7.0 where the FeedProxy.aspx script can be abused to proxy arbitrary requests via the url parameter, enabling an open-proxy condition. The root cause is improper handling of the url parameter in FeedProxy.aspx, allowing unauthenticated remote use ...