Apache OFBiz 10.4.x - Multiple Cross-Site Scripting Vulnerabilities

Apache OFBiz 10.4.x - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/57463/info Apache OFBiz is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execu...

Apache OFBiz 10.4.x - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/57463/info Apache OFBiz is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary HTML and script code in the browser of an unsuspecting...

CVE-2012-3506

Unspecified vulnerability in the Apache Open For Business Project aka OFBiz 10.04.x before 10.04.03 has unknown impact and attack vectors...

Design/Logic Flaw

Unspecified vulnerability in the Apache Open For Business Project aka OFBiz 10.04.x before 10.04.03 has unknown impact and attack vectors...

CVE-2012-3506

Unspecified vulnerability in the Apache Open For Business Project aka OFBiz 10.04.x before 10.04.03 has unknown impact and attack vectors...

CVE-2012-3506

Unspecified vulnerability in the Apache Open For Business Project aka OFBiz 10.04.x before 10.04.03 has unknown impact and attack vectors...

CVE-2012-3506

Technical details for CVE-2012-3506 are not publicly available in the provided documents; no affected products, vectors, or fixes are disclosed. Monitor for updates.

CVE-2012-3506: Undefined Security Weakness

Unspecified vulnerability in the Apache Open For Business Project aka OFBiz 10.04.x before 10.04.03 has unknown impact and attack vectors...

PT-2012-4770

Name of the Vulnerable Software and Affected Versions Apache Open For Business Project aka OFBiz versions 10.04.x before 10.04.03 Description The issue concerns an unspecified vulnerability with unknown impact and attack vectors. Recommendations For Apache Open For Business Project aka OFBiz...

Apache OFBiz Default Credentials

Nessus was able to login to the remote Apache OFBiz application by providing default credentials. A remote attacker can exploit this issue to perform administrative actions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Apache OFBiz Webslinger Component XSS

The version of Webslinger included with Apache OFBiz hosted on the remote host has a cross-site scripting vulnerability. A remote attacker could exploit this by tricking a user into requesting a specially crafted URL, resulting in arbitrary script code execution. This version of OFBiz reportedly...

Apache OFBiz Detection

Apache OFBiz is an open source enterprise resource planning ERP system. One or more web applications bundled with OFBiz were detected on the remote host. C Tenable, Inc. include'compat.inc'; if description scriptid59245; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

Apache OFBiz FlexibleStringExpander Remote Code Execution

The version of Apache OFBiz hosted on the remote host has an arbitrary code execution vulnerability. Specially crafted input passed to the getInstance method of the FlexibleStringExpander class can result in the evaluation of nested Java Unified Expression Language expressions. A remote,...

[CVE-2012-1621] Apache OFBiz information disclosure vulnerability

CVE-2012-1621: Apache OFBiz information disclosure vulnerability Severity: Important Vendor: The Apache Software Foundation - Apache OFBiz ======Versions Affected====== Apache OFBiz 10.04 also known as 10.04.01 ======Description====== Multiple XSS: XSS 1: Error messages containing user input...

[CVE-2012-1622] Apache OFBiz information disclosure vulnerability

CVE-2012-1622: Apache OFBiz 10.04 and later allows remote attackers to execute arbitrary code via unspecified vectors Severity: Critical Vendor: The Apache Software Foundation - Apache OFBiz ======Versions Affected====== Apache OFBiz 10.04 also known as 10.04.01 ======Description====== Apache OFB...

Apache OFBiz Multiple XSS Vulnerabilities (CVE-2010-0432)

Apache OFBiz is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

Apache OFBiz - Multiple Cross-Site Scripting Vulnerabilities

Apache OFBiz - Multiple Cross-Site Scripting Vulnerabilities Bonsai Information Security - Advisory http://www.bonsai-sec.com/research/ Multiple XSS in Apache OFBiz 1. Advisory Information Title: Multiple XSS in Apache OFBiz Advisory ID: BONSAI-2010-0103 Advisory URL:...

Apache OFBiz Multiple XSS Vulnerability

Exploit for php platform in category web applications ======================================= Apache OFBiz Multiple XSS Vulnerability ======================================= Bonsai Information Security - Advisory http://www.bonsai-sec.com/research/ Multiple XSS in Apache OFBiz 1. Advisory...

Apache OFBiz - Multiple Cross-Site Scripting Vulnerabilities

Bonsai Information Security - Advisory http://www.bonsai-sec.com/research/ Multiple XSS in Apache OFBiz 1. Advisory Information Title: Multiple XSS in Apache OFBiz Advisory ID: BONSAI-2010-0103 Advisory URL: http://www.bonsai-sec.com/research/vulnerabilities/apacheofbiz-multiple-xss-0103.php Date...

Apache OFBiz SQL Remote Execution PoC Payload

No description provided by source. / Apache OFBiz SQL Remote Execution PoC Payload. CVE: CVE-2010-0432 By: Lucas Apa lucas -at- bonsai-sec.com . Bonsai Information Security http://www.bonsai-sec.com/ / var cmd = 'command'; var xmlhttp=false; try xmlhttp = new ActiveXObject"Msxml2.XMLHTTP"; catch ...