7 matches found
CVE-2015-3422: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in SearchBlox before 8.2.1 allows remote attackers to inject arbitrary web script or HTML via the menu2 parameter to admin/main.jsp...
PT-2015-6224
Name of the Vulnerable Software and Affected Versions SearchBlox versions prior to 8.2.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the menu2 parameter to the "admin/main.jsp" API endpoint. Recommendations For versions prior to...
PT-2015-4993
Name of the Vulnerable Software and Affected Versions SearchBlox versions prior to 8.2 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur via two main avenue...
CVE-2015-0967: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in SearchBlox before 8.2 allow remote attackers to inject arbitrary web script or HTML via 1 the search field in plugin/index.html or 2 the title field in the Create Featured Result form in admin/main.jsp...
CVE-2013-4600
Multiple cross-site scripting XSS vulnerabilities in Alkacon OpenCms before 8.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 title parameter to system/workplace/views/admin/admin-main.jsp or the 2 requestedResource parameter to system/login/index.html...
CVE-2013-4600: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Alkacon OpenCms before 8.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 title parameter to system/workplace/views/admin/admin-main.jsp or the 2 requestedResource parameter to system/login/index.html...
CVE-2006-3935: Undefined Security Weakness
system/workplace/views/admin/admin-main.jsp in Alkacon OpenCms before 6.2.2 does not restrict access to administrator functions, which allows remote authenticated users to 1 send broadcast messages to all users /workplace/broadcast, 2 list all users /accounts/users, 3 add webusers...