CVE-2026-4813

CVE-2026-4813 CVSS-B 9.4 CRITIQUE RCE authentifié via injection XSLT dans Lutece Core Explications et plus sur mon site web xsl:value-of se...

CVE-2026-4813

A vulnerability in the Lutece Core XSL export management module up to version 7.1.7, which allows authenticated administrators to execute code remotely. The XML/XSLT processing configuration does not enable secure processing mode FEATURESECUREPROCESSING, allowing Java extension functions to be...

EUVD-2026-69014

A vulnerability in the Lutece Core XSL export management module up to version 7.1.7, which allows authenticated administrators to execute code remotely. The XML/XSLT processing configuration does not enable secure processing mode FEATURESECUREPROCESSING, allowing Java extension functions to be...

CVE-2026-4813 Code injection in the Lutece Core

A vulnerability in the Lutece Core XSL export management module up to version 7.1.7, which allows authenticated administrators to execute code remotely. The XML/XSLT processing configuration does not enable secure processing mode FEATURESECUREPROCESSING, allowing Java extension functions to be...

CVE-2026-4813

Lutece Core versions up to 7.1.7 are affected by a code injection vulnerability in the XSL export management module . The root cause is that the XML/XSLT processing configuration does not enable FEATURE_SECURE_PROCESSING , permitting Java extension functions to execute from malicious XSL styleshe...

PT-2026-84142

Name of the Vulnerable Software and Affected Versions Lutece Core versions prior to 7.1.8 Description An issue in the XSL export management module allows authenticated administrators to execute arbitrary code on the server. The XML/XSLT processing configuration fails to enable secure processing...

EUVD-2005-4396

Malware in sbrugna...

CVE-2005-4401

Cross-site scripting XSS vulnerability in Lutece 1.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the query parameter...

CVE-2005-4401

CVE-2005-4401 describes a cross-site scripting (XSS) vulnerability in Lutece 1.2.3 and earlier. The affected component is the Lutece web application, with the root cause described as an XSS flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters,...

CVE-2005-4401

Cross-site scripting XSS vulnerability in Lutece 1.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the query parameter...

Lutece XSS vuln.

Lutece XSS vuln. Vuln. discovered by : r0t Date: 18 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/lutece-xss-vuln.html vendor:http://lutece.paris.fr affected version:1.2.3 and prior Product Description: Lutece is a web portal engine that lets you quickly create internet or intran...