Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

464 matches found

CVE
CVE•added 2008/04/11 8:28 p.m.•56 views

CVE-2008-1753

CVE-2008-1753 is an XSS vulnerability in Alkacon OpenCMS 7.0.3, specifically in system/workplace/admin/workplace/sessions.jsp where the searchfilter parameter is not properly sanitized. The issue (different vector from CVE-2008-1510) allows remote attackers to inject arbitrary script/HTML, as doc...

4.3CVSS5.5AI score0.01107EPSS
SaveExploits1References5Affected Software1
Packet Storm
Packet Storm•added 2008/04/08 12:00 a.m.•48 views

alkaconsessions-xss.txt

Alkacon OpenCms sessions.jsp searchfilter XSS Product: Alkacon OpenCms http://www.opencms.org/ OpenCms contains a cross-site scripting vulnerability in the active session reporting function. Input to parameter searchfilter in page opencms/system/workplace/admin/workplace/sessions.jsp is not...

4.3CVSS6.6AI score0.01462EPSS
SaveExploits2
securityvulns
securityvulns•added 2008/04/05 12:00 a.m.•63 views

Alkacon OpenCms sessions.jsp searchfilter XSS

Alkacon OpenCms sessions.jsp searchfilter XSS Product: Alkacon OpenCms http://www.opencms.org/ OpenCms contains a cross-site scripting vulnerability in the active session reporting function. Input to parameter searchfilter in page opencms/system/workplace/admin/workplace/sessions.jsp is not...

4.3CVSS0.8AI score0.01462EPSS
SaveExploits2
NVD
NVD•added 2008/03/25 11:44 p.m.•32 views

CVE-2008-1510

Cross-site scripting XSS vulnerability in system/workplace/admin/accounts/userslist.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the 1 searchfilter or 2 listSearchFilter parameter...

4.3CVSS5.5AI score0.01462EPSS
SaveExploits2References4
Cvelist
Cvelist•added 2008/03/25 11:00 p.m.•40 views

CVE-2008-1510

Cross-site scripting XSS vulnerability in system/workplace/admin/accounts/userslist.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the 1 searchfilter or 2 listSearchFilter parameter...

5.5AI score0.01462EPSS
SaveExploits2References4
CVE
CVE•added 2008/03/25 11:00 p.m.•65 views

CVE-2008-1510

CVE-2008-1510 describes a Cross-site scripting (XSS) vulnerability in Alkacon OpenCMS 7.0.3, specifically in the page system/workplace/admin/accounts/users_list.jsp. An attacker can inject arbitrary script/HTML via the (1) searchfilter or (2) listSearchFilter parameters, potentially affecting use...

4.3CVSS5.5AI score0.01462EPSS
SaveExploits2References4Affected Software1
securityvulns
securityvulns•added 2008/03/25 12:00 a.m.•62 views

Alkacon OpenCms users_list.jsp searchfilter XSS

Alkacon OpenCms userslist.jsp searchfilter XSS Product: Alkacon OpenCms http://www.opencms.org/ OpenCms contains a cross-site scripting vulnerability in the user management function. Input to parameter searchfilter in page opencms/system/workplace/admin/accounts/userslist.jsp is not sufficiently...

1AI score
SaveExploits0
exploitpack
exploitpack•added 2008/03/24 12:00 a.m.•21 views

Alkacon OpenCMS 7.0.3 - users_list.jsp Multiple Cross-Site Scripting Vulnerabilities

Alkacon OpenCMS 7.0.3 - userslist.jsp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/28411/info Alkacon OpenCms is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker ma...

0.2AI score
SaveExploits0
Packet Storm
Packet Storm•added 2008/03/24 12:00 a.m.•27 views

alkaconopencms-xss.txt

Alkacon OpenCms userslist.jsp searchfilter XSS Product: Alkacon OpenCms http://www.opencms.org/ OpenCms contains a cross-site scripting vulnerability in the user management function. Input to parameter searchfilter in page opencms/system/workplace/admin/accounts/userslist.jsp is not sufficiently...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB•added 2008/03/24 12:00 a.m.•27 views

Alkacon OpenCMS 7.0.3 - 'users_list.jsp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/28411/info Alkacon OpenCms is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

4.3CVSS5.8AI score0.01462EPSS
SaveExploits2
Packet Storm
Packet Storm•added 2008/03/13 12:00 a.m.•31 views

alkacon-xssdisclose.txt

Alkacon OpenCms logfileViewSettings.jsp XSS, file disclosure Product: Alkacon OpenCms http://www.opencms.org/ OpenCms contains a vulnerability in the Logfile Viewer Settings function. Input to Parameter filePath.0 in page opencms/system/workplace/admin/workplace/logfileview/logfileViewSettings.js...

7.4AI score
SaveExploits0
Prion
Prion•added 2008/03/12 5:44 p.m.•20 views

Path traversal

Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote authenticated administrators to read arbitrary files via a full pathname in the filePath.0 parameter...

4CVSS6.8AI score0.02255EPSS
SaveExploits2References5Affected Software1
Prion
Prion•added 2008/03/12 5:44 p.m.•24 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the filePath.0 parameter in a save action, a...

4.3CVSS6AI score0.01511EPSS
SaveExploits4References5Affected Software1
NVD
NVD•added 2008/03/12 5:44 p.m.•19 views

CVE-2008-1300

Cross-site scripting XSS vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the filePath.0 parameter in a save action, a...

4.3CVSS5.6AI score0.01511EPSS
SaveExploits2References5
NVD
NVD•added 2008/03/12 5:44 p.m.•26 views

CVE-2008-1301

Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote authenticated administrators to read arbitrary files via a full pathname in the filePath.0 parameter...

4CVSS6.3AI score0.02255EPSS
SaveExploits2References5
Cvelist
Cvelist•added 2008/03/12 5:00 p.m.•25 views

CVE-2008-1300

Cross-site scripting XSS vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the filePath.0 parameter in a save action, a...

5.6AI score0.01511EPSS
SaveExploits2References5
CVE
CVE•added 2008/03/12 5:00 p.m.•57 views

CVE-2008-1300

CVE-2008-1300 describes a cross-site scripting (XSS) vulnerability in Alkacon OpenCms, specifically in the Logfile Viewer Settings function (system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp) in OpenCms 7.0.3 and 7.0.4. The flaw allows remote attackers to inject arbitrary web s...

4.3CVSS5.7AI score0.01511EPSS
SaveExploits2References5Affected Software1
CVE
CVE•added 2008/03/12 5:00 p.m.•60 views

CVE-2008-1301

The CVE-2008-1301 entry concerns Alkacon OpenCms (versions 7.0.3 and 7.0.4). The vulnerability is an absolute path traversal in logfileViewSettings.jsp (path: system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp) that allows remote authenticated administrators to read arbitrary fi...

4CVSS6.3AI score0.02255EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist•added 2008/03/12 5:00 p.m.•32 views

CVE-2008-1301

Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote authenticated administrators to read arbitrary files via a full pathname in the filePath.0 parameter...

6.3AI score0.02255EPSS
SaveExploits2References5
securityvulns
securityvulns•added 2008/03/09 12:00 a.m.•64 views

Alkacon OpenCms logfileViewSettings.jsp XSS, file disclosure

Alkacon OpenCms logfileViewSettings.jsp XSS, file disclosure Product: Alkacon OpenCms http://www.opencms.org/ OpenCms contains a vulnerability in the Logfile Viewer Settings function. Input to Parameter filePath.0 in page opencms/system/workplace/admin/workplace/logfileview/logfileViewSettings.js...

0.3AI score
SaveExploits0
Rows per page
Query Builder