Detections
Analytics

Sitecore CMS < 6.4.1 rev.110720 'url' Parameter URI Redirection

medium Nessus Plugin ID 55979

Language:

Synopsis

The remote web server contains an application that is affected by a redirection vulnerability.

Description

The remote host is running a version of Sitecore CMS which is reportedly affected by a redirection vulnerability. An attacker could exploit this to redirect users to unintended websites.

Solution

Upgrade to Sitecore 6.4.1 rev.110720 or newer.

See Also

http://www.nessus.org/u?6c2f45d7

http://www.tomneaves.com/Sitecore_CMS_Open_URL_Redirect.txt

Plugin Details

Severity: Medium

ID: 55979

File Name: sitecore_cms_uri_param_url_redirect.nasl

Version: 1.9

Type: remote

Family: CGI abuses

Published: 8/25/2011

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/a:sitecore:cms

Required KB Items: www/sitecore_cms

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 7/27/2011

Vulnerability Publication Date: 7/28/2011

Reference Information

BID: 48930