Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
kentico kentico vulnerabilities and exploits
(subscribe to this query)
9.1
CVSSv3
CVE-2019-12102
Kentico 11 through 12 lets attackers upload and explore files without authentication via the cmsmodules/medialibrary/formcontrols/liveselectors/insertimageormedia/tabs_media.aspx URI. NOTE: The vendor disputes the report because the researcher did not configure the media library ...
Kentico Kentico
6.1
CVSSv3
CVE-2020-24794
Cross Site Scripting (XSS) vulnerability in Kentico prior to 12.0.75.
Kentico Kentico
9.8
CVSSv3
CVE-2019-10068
An issue exists in Kentico 12.0.x prior to 12.0.15, 11.0.x prior to 11.0.48, 10.0.x prior to 10.0.52, and 9.x versions. Due to a failure to validate security headers, it was possible for a specially crafted request to the staging service to bypass the initial authentication and p...
Kentico Kentico
7.5
CVSSv3
CVE-2022-32387
In Kentico prior to 13.0.66, attackers can achieve Denial of Service via a crafted request to the GetResource handler.
Kentico Kentico
5.4
CVSSv3
CVE-2019-19493
Kentico prior to 12.0.50 allows file uploads in which the Content-Type header is inconsistent with the file extension, leading to XSS.
Kentico Kentico
4.9
CVSSv3
CVE-2022-29287
Kentico CMS prior to 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user management rights (default is Administrator) to export the user options of any user, even ones with higher privileges (like Global Administrators) than the current ...
Kentico Kentico
8.8
CVSSv3
CVE-2018-19453
Kentico CMS prior to 11.0.45 allows unrestricted upload of a file with a dangerous type.
Kentico Kentico Cms
7.2
CVSSv3
CVE-2018-6843
Kentico 10 prior to 10.0.50 and 11 prior to 11.0.3 has SQL injection in the administration interface.
Kentico Kentico Cms
9.8
CVSSv3
CVE-2017-17736
Kentico 9.0 prior to 9.0.51 and 10.0 prior to 10.0.48 allows remote malicious users to obtain Global Administrator access by visiting CMSInstall/install.aspx and then navigating to the CMS Administration Dashboard.
Kentico Kentico Cms
2 Github repositories
7.2
CVSSv3
CVE-2019-6242
Kentico v10.0.42 allows Global Administrators to read the cleartext SMTP Password by navigating to the SMTP configuration page. NOTE: the vendor considers this a best-practice violation but not a vulnerability. The vendor plans to fix it at a future time
Kentico Kentico 10.0.42
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-6267
XML injection
CVE-2024-37673
CVE-2024-6266
CVE-2024-30078
arbitrary
CVE-2024-36886
CVE-2024-5346
template injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »