org.opencms.modules:com.alkacon.opencms.v8.event (8.5.2), org.opencms.modules:com.alkacon.opencms.v8.news (8.5.2) +31 more potentially affected by CVE-2019-13237 via org.opencms:opencms-core (8.5.2)

org.opencms:opencms-core MAVEN version 8.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms.modules:com.alkacon.opencms.v8.event 8.5.2 - org.opencms.modules:com.alkacon.opencms.v8.news 8.5.2 ...

org.opencms.modules:com.alkacon.opencms.v8.article (>=8.0.1, <=8.0.4), org.opencms.modules:com.alkacon.opencms.v8.event (>=8.0.1, <=8.0.3) +65 more potentially affected by CVE-2019-13237 via org.opencms:opencms-core (8.0.1)

org.opencms:opencms-core MAVEN version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms.modules:com.alkacon.opencms.v8.article =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1,...

de.eonas.portal:opencmsinstaller (9.5.1.0), de.eonas.portal:opencmsportaldriver (9.5.1.0) +21 more potentially affected by CVE-2019-13237 via org.opencms:opencms-core (9.5.1)

org.opencms:opencms-core MAVEN version 9.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - de.eonas.portal:opencmsinstaller 9.5.1.0 - de.eonas.portal:opencmsportaldriver 9.5.1.0 -...

org.opencms:opencms-webapp (8.0.2) potentially affected by CVE-2019-13237 via org.opencms:opencms-core (8.0.2)

org.opencms:opencms-core MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-webapp 8.0.2 Source cves: CVE-2019-13237 Source advisory: OSV:GHSA-36HF-6HP2-9G4C...

org.opencms:opencms-setup (8.0.3-rev), org.opencms:opencms-upload (8.0.3-rev) +16 more potentially affected by CVE-2019-13237 via org.opencms:opencms-core (8.0.3-rev)

org.opencms:opencms-core MAVEN version 8.0.3-rev is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-setup 8.0.3-rev - org.opencms:opencms-upload 8.0.3-rev -...

Alkacon OpenCMS 10.5.x Local File Inclusion

Exploit Title: Alkacon OpenCMS 10.5.x - Multiple LFI in Alkacon OpenCms Site Management Google Dork: N/A Date: 18/07/2019 Exploit Author: Aetsu Vendor Homepage: http://www.opencms.org Software Link: https://github.com/alkacon/opencms-core Version: 10.5.x Tested on: 10.5.5 / 10.5.4 CVE :...

Alkacon OpenCMS 10.5.x - Local File inclusion

Alkacon OpenCMS 10.5.x - Local File inclusion Exploit Title: Alkacon OpenCMS 10.5.x - Multiple LFI in Alkacon OpenCms Site Management Google Dork: N/A Date: 18/07/2019 Exploit Author: Aetsu Vendor Homepage: http://www.opencms.org Software Link: https://github.com/alkacon/opencms-core Version:...

Alkacon OpenCMS 10.5.x - Local File inclusion Vulnerability

Exploit for multiple platform in category web applications Exploit Title: Alkacon OpenCMS 10.5.x - Multiple LFI in Alkacon OpenCms Site Management Exploit Author: Aetsu Vendor Homepage: http://www.opencms.org Software Link: https://github.com/alkacon/opencms-core Version: 10.5.x Tested on: 10.5.5...

Alkacon OpenCMS 10.5.x - Local File inclusion

Exploit Title: Alkacon OpenCMS 10.5.x - Multiple LFI in Alkacon OpenCms Site Management Google Dork: N/A Date: 18/07/2019 Exploit Author: Aetsu Vendor Homepage: http://www.opencms.org Software Link: https://github.com/alkacon/opencms-core Version: 10.5.x Tested on: 10.5.5 / 10.5.4 CVE :...

CVE-2019-13237

CVE-2019-13237 affects Alkacon OpenCms 10.5.4 and 10.5.5, where Local File Inclusion allows access to server resources via multiple JSP endpoints (e.g., loginmessage.jsp, xmlcontentrepair.jsp, history/index.jsp, and others). The root cause is improper access control in resources such as clearhist...