EUVD-2012-1631

Malware in sbrugna...

CVE-2012-1621

Multiple cross-site scripting XSS vulnerabilities in Apache Open For Business Project aka OFBiz 10.04.x before 10.04.02 allow remote attackers to inject arbitrary web script or HTML via 1 a parameter array in freemarker templates, the 2 contentId or 3 mapKey parameter in a cms event request, whic...

CVE-2012-1621: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Apache Open For Business Project aka OFBiz 10.04.x before 10.04.02 allow remote attackers to inject arbitrary web script or HTML via 1 a parameter array in freemarker templates, the 2 contentId or 3 mapKey parameter in a cms event request, whic...

Apache OFBiz Webslinger Component XSS

The version of Webslinger included with Apache OFBiz hosted on the remote host has a cross-site scripting vulnerability. A remote attacker could exploit this by tricking a user into requesting a specially crafted URL, resulting in arbitrary script code execution. This version of OFBiz reportedly...