QwikSec

Security Database

CVE

CWE

Training

CVE-2014-7292

Published: Oct 23, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

Open redirect vulnerability in the Click-Through feature in Newtelligence dasBlog 2.1 (2.1.8102.813), 2.2 (2.2.8279.16125), and 2.3 (2.3.9074.18820) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to ct.ashx.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.tetraph.com/blog/cves/cve-2014-7292-newtelligence-dasblog-open-redirect-vulnerability

x_refsource_MISC

vdb-entry

x_refsource_BID

20141020 CVE-2014-7292 Newtelligence dasBlog Open Redirect Vulnerability

mailing-list

x_refsource_FULLDISC

dasblog-cve20147292-open-redirect(97667)

vdb-entry

x_refsource_XF

http://packetstormsecurity.com/files/128749/Newtelligence-dasBlog-2.3-Open-Redirect.html

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.