Vulnerabilities

TI-2021-09033 CVE-2021-27581 · GHSA-xjcj-m8p7-67rr

The Blog module in Kentico CMS 5.5 R2 build 5.5.3996 allows SQL injection via the tagname parameter.

MEDIUM 45

The Blog module in Kentico CMS 5.5 R2 build 5.5.3996 allows SQL injection via the tagname parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0169 Published 2021-03-05 No fix listed CWE-89

TI-2015-06498 CVE-2015-7823 · GHSA-vx5p-j2w4-7m7g

Open redirect vulnerability in CMSPages/GetDocLink.ashx in Kentico CMS 8.2 through 8.2.41…

LOW 34

Open redirect vulnerability in CMSPages/GetDocLink.ashx in Kentico CMS 8.2 through 8.2.41 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the link parameter.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.05143 Published 2015-10-21 No fix listed

TI-2015-06497 CVE-2015-7822 · GHSA-2p9m-c88w-j8wx

Multiple cross-site scripting (XSS) vulnerabilities in Kentico CMS 8.2 allow remote…

LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in Kentico CMS 8.2 allow remote attackers to inject arbitrary web script or HTML via a (1) parameter name to CMSModules/AdminControls/Pages/UIPage.aspx or the (2) CMSBo…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01126 Published 2015-10-21 No fix listed CWE-79

Vulnerabilities

Filters

The Blog module in Kentico CMS 5.5 R2 build 5.5.3996 allows SQL injection via the tagname parameter.

Open redirect vulnerability in CMSPages/GetDocLink.ashx in Kentico CMS 8.2 through 8.2.41…

Multiple cross-site scripting (XSS) vulnerabilities in Kentico CMS 8.2 allow remote…