CVE-2014-7292 – Open redirect vulnerability in the Click-Through feature in Newtelligence

Open redirect vulnerability in the Click-Through feature in Newtelligence dasBlog 2.1 (2.1.8102.813), 2.2 (2.2.8279.16125), and 2.3 (2.3.9074.18820) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to ct.ashx.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7292

Reference (s):

• BID:70654
• URL: http://www.securityfocus.com/bid/70654
• FULLDISC:20141020 CVE-2014-7292 Newtelligence dasBlog Open Redirect Vulnerability
• URL: http://seclists.org/fulldisclosure/2014/Oct/91
• http://packetstormsecurity.com/files/128749/Newtelligence-dasBlog-2.3-Open-Redirect.html