317 matches found
CVE-2023-42346
Alkacon OpenCms before 16 allows XXE when the refers to an external host...
CVE-2023-42346: Improper Restriction of XML External Entity Reference
Alkacon OpenCms before 16 allows XXE when the refers to an external host...
CVE-2023-42345: Improper Neutralization of Input During Web Page Generation
A Cross Site Scripting vulnerability in Alkacon OpenCms before 16 exists via updateModelGroups.jsp...
CVE-2023-42344: Improper Restriction of XML External Entity Reference
Alkacon OpenCms before 10.5.1 allows remote unauthenticated attackers to obtain sensitive information via a cmis-online/query XXE attack on a Chemistry servlet...
CVE-2023-42343: Improper Neutralization of Input During Web Page Generation
A Cross Site Scripting vulnerability in Alkacon OpenCms before 10.5.1 exists via cmis-online/type...
CVE-2026-2736
Alkacon OpenCms 18.0 is affected by CVE-2026-2736: a reflected XSS vulnerability exploitable by sending a user a malicious URL containing the q parameter in /search/index.html. The issue allows execution of JavaScript in the victim’s browser, enabling potential access to session cookies or action...
PT-2026-20772
Stored Cross-Site Scripting XSS in Alkacon's OpenCms v18.0, which occurs when user input is not properly validated when sending a POST request to ‘/blog/new-article/org.opencms.ugc.CmsUgcEditService.gwt’ using the ‘text’ parameter...
Alkacon OpenCMS 跨站脚本漏洞
Alkacon OpenCMS is a content management system developed by Alkacon Corporation. Version 18.0 of Alkacon OpenCMS contains a cross-site scripting vulnerability. This vulnerability arises from improper input validation of the text parameter when sending a POST request to...
Alkacon OpenCMS 跨站脚本漏洞
Alkacon OpenCMS is a content management system developed by Alkacon Corporation. Version 18.0 of Alkacon OpenCMS contains a cross-site scripting vulnerability. This vulnerability arises from the unvalidated q parameter in the/search/index.html file, which may lead to reflective cross-site scripti...
CVE-2024-41447
A stored cross-site scripting XSS vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the author parameter under the Create/Modify article function...
EUVD-2021-2202
Malware in sbrugna...
EUVD-2006-2571
Malware in sbrugna...
EUVD-2006-3927
Malware in sbrugna...
EUVD-2006-3929
Malware in sbrugna...
EUVD-2008-1511
Malware in sbrugna...
EUVD-2015-2444
Malware in sbrugna...
EUVD-2008-1307
Malware in sbrugna...
EUVD-2008-1056
Malware in sbrugna...