PT-2014-8394 · Yootheme · Yootheme Pagekit Cms

Publicado 2014-10-14 · Atualizado 2014-10-21 · CVE-2014-8070

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions YOOtheme Pagekit CMS version 0.8.7

Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. This is achieved by manipulating a URL in the redirect parameter to index.php/user/logout.

Recommendations For YOOtheme Pagekit CMS version 0.8.7, update to a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2014-8070

Produtos afetados

Yootheme Pagekit Cms

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-8070 · Nota de Segurança
• http://packetstormsecurity.com/files/128641/Pagekit-0.8.7-Cross-Site-Scripting-Open-Redirect.html · Nota