CVE-2014-7292

Published: Oct 23, 2014Modified: May 6, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Open redirect vulnerability in the Click-Through feature in Newtelligence dasBlog 2.1 (2.1.8102.813), 2.2 (2.2.8279.16125), and 2.3 (2.3.9074.18820) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to ct.ashx.

Affected (3)

Products: Newtelligence: Dasblog

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Newtelligence Dasblog	Version 2.1 2.1.8102.813
Newtelligence Dasblog	Version 2.2 2.2.8279.16125
Newtelligence Dasblog	Version 2.3 2.3.9074.18820

References (10)

http://packetstormsecurity.com/files/128749/Newtelligence-dasBlog-2.3-Open-Redirect.html

Source: cve@mitre.org

Exploit

http://seclists.org/fulldisclosure/2014/Oct/91

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/70654

Source: cve@mitre.org

http://www.tetraph.com/blog/cves/cve-2014-7292-newtelligence-dasblog-open-redirect-vulnerability

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/97667

Source: cve@mitre.org

http://packetstormsecurity.com/files/128749/Newtelligence-dasBlog-2.3-Open-Redirect.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://seclists.org/fulldisclosure/2014/Oct/91

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/70654

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.tetraph.com/blog/cves/cve-2014-7292-newtelligence-dasblog-open-redirect-vulnerability

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/97667

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.