[CVE-2013-2250] Apache OFBiz Nested expression evaluation allows remote users to execute arbitrary UEL functions in OFBiz

CVE-2013-2250 - Apache OFBiz Nested expression evaluation allows remote users to execute arbitrary UEL functions in OFBiz Vendor: The Apache Software Foundation Versions Affected: Apache OFBiz 10.04.01 to 10.04.05 Apache OFBiz 11.04.01 to 11.04.02 Apache OFBiz 12.04.01 Description: Parameter valu...

[CVE-2013-2137] Apache OFBiz XSS vulnerability in the "View Log" screen of the Webtools application

CVE-2013-2137 - Apache OFBiz XSS vulnerability in the "View Log" screen of the Webtools application Vendor: The Apache Software Foundation Versions Affected: Apache OFBiz 10.04.01 to 10.04.05 Apache OFBiz 11.04.01 to 11.04.02 Apache OFBiz 12.04.01 Description: XSS vulnerability in the "View Log"...

Apache OFBiz Nested Expression Arbitrary UEL Function Execution

The version of Apache OFBiz hosted on the remote host is affected by a code execution vulnerability that could allow the execution of arbitrary UEL functions. Specially crafted input passed to the getInstance method of the FlexibleStringExpander class can result in the evaluation of nested Java...

Apache OFBiz 10.04.01 RCE (Linux)

Remote command execution vulnerability in ApacheOFBiz FlexibleStringExpander Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Apache OFBiz 10.04.01 RCE (Windows)

Remote command execution vulnerability in ApacheOFBiz FlexibleStringExpander Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Apache OFBiz Cross Site Scripting

Title: Cross-Site Scripting XSS Vulnerability in Apache OFBiz Type: Remote Author: Juan Caillava @jcaillava / Marcos Garcia @artsweb CVE: CVE-2013-0177 Impact: Direct execution of arbitrary code in the context of Webserver user. Release Date: 18.01.2013 Summary ======= Apache Open For Business...

Apache OFBiz 10.4.x - Multiple Cross-Site Scripting Vulnerabilities

Apache OFBiz 10.4.x - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/57463/info Apache OFBiz is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execu...

Apache OFBiz 10.4.x - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/57463/info Apache OFBiz is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary HTML and script code in the browser of an unsuspecting...

CVE-2012-3506

Unspecified vulnerability in the Apache Open For Business Project aka OFBiz 10.04.x before 10.04.03 has unknown impact and attack vectors...

Design/Logic Flaw

Unspecified vulnerability in the Apache Open For Business Project aka OFBiz 10.04.x before 10.04.03 has unknown impact and attack vectors...

CVE-2012-3506

Technical details for CVE-2012-3506 are not publicly available in the provided documents; no affected products, vectors, or fixes are disclosed. Monitor for updates.

CVE-2012-3506

Unspecified vulnerability in the Apache Open For Business Project aka OFBiz 10.04.x before 10.04.03 has unknown impact and attack vectors...

Apache OFBiz Default Credentials

Nessus was able to login to the remote Apache OFBiz application by providing default credentials. A remote attacker can exploit this issue to perform administrative actions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Apache OFBiz Detection

Apache OFBiz is an open source enterprise resource planning ERP system. One or more web applications bundled with OFBiz were detected on the remote host. C Tenable, Inc. include'compat.inc'; if description scriptid59245; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

Apache OFBiz Webslinger Component XSS

The version of Webslinger included with Apache OFBiz hosted on the remote host has a cross-site scripting vulnerability. A remote attacker could exploit this by tricking a user into requesting a specially crafted URL, resulting in arbitrary script code execution. This version of OFBiz reportedly...

Apache OFBiz FlexibleStringExpander Remote Code Execution

The version of Apache OFBiz hosted on the remote host has an arbitrary code execution vulnerability. Specially crafted input passed to the getInstance method of the FlexibleStringExpander class can result in the evaluation of nested Java Unified Expression Language expressions. A remote,...

[CVE-2012-1622] Apache OFBiz information disclosure vulnerability

CVE-2012-1622: Apache OFBiz 10.04 and later allows remote attackers to execute arbitrary code via unspecified vectors Severity: Critical Vendor: The Apache Software Foundation - Apache OFBiz ======Versions Affected====== Apache OFBiz 10.04 also known as 10.04.01 ======Description====== Apache OFB...

[CVE-2012-1621] Apache OFBiz information disclosure vulnerability

CVE-2012-1621: Apache OFBiz information disclosure vulnerability Severity: Important Vendor: The Apache Software Foundation - Apache OFBiz ======Versions Affected====== Apache OFBiz 10.04 also known as 10.04.01 ======Description====== Multiple XSS: XSS 1: Error messages containing user input...

Apache OFBiz Multiple XSS Vulnerabilities (CVE-2010-0432)

Apache OFBiz is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

Apache OFBiz Multiple XSS Vulnerability

Exploit for php platform in category web applications ======================================= Apache OFBiz Multiple XSS Vulnerability ======================================= Bonsai Information Security - Advisory http://www.bonsai-sec.com/research/ Multiple XSS in Apache OFBiz 1. Advisory...