625 matches found
Alkakon OpenCms 7.5.2 and below non persistent XSS
Exploit for unknown platform in category web applications ================================================== Alkakon OpenCms 7.5.2 and below non persistent XSS ================================================== Exploit Title: Alkakon OpenCms 7.5.2 and below non persistent XSS. Author: EgoPL...
OpenCms Multiple Input Validation Vulnerabilities
Binary data 5207.prm...
OpenCms (7.5.0) - Vulnerability: Cross-Site Scripting, Phishing Through Frames, Application Error
Application: OpenCms Version: 7.5.0 Hardware: Tomcat/Oracle Vulnerability: Cross-Site Scripting, Phishing Through Frames, Application Error Overview: Various URL's within the deployed OpenCms application version 7.5.0 are open to attacks, including Cross-Site Scripting, Phishing Through Frames an...
OpenCMS 7.5.0 Cross Site Scripting
Application: OpenCms Version: 7.5.0 Hardware: Tomcat/Oracle Vulnerability: Cross-Site Scripting, Phishing Through Frames, Application Error Overview: Various URL's within the deployed OpenCms application version 7.5.0 are open to attacks, including Cross-Site Scripting, Phishing Through Frames an...
Alkacon OpenCMS 7.x - Multiple Input Validation Vulnerabilities
Alkacon OpenCMS 7.x - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/35979/info OpenCms is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an authenticated...
Alkacon OpenCMS 7.x - Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/35979/info OpenCms is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an authenticated attacker to obtain sensitive information, steal cookie-based...
CVE-2008-1753
Cross-site scripting XSS vulnerability in system/workplace/admin/workplace/sessions.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the searchfilter parameter, a different vector than CVE-2008-1510...
Cross site scripting
Cross-site scripting XSS vulnerability in system/workplace/admin/workplace/sessions.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the searchfilter parameter, a different vector than CVE-2008-1510...
CVE-2008-1753
CVE-2008-1753 is an XSS vulnerability in Alkacon OpenCMS 7.0.3, specifically in system/workplace/admin/workplace/sessions.jsp where the searchfilter parameter is not properly sanitized. The issue (different vector from CVE-2008-1510) allows remote attackers to inject arbitrary script/HTML, as doc...
CVE-2008-1753
Cross-site scripting XSS vulnerability in system/workplace/admin/workplace/sessions.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the searchfilter parameter, a different vector than CVE-2008-1510...
CVE-2008-1753: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in system/workplace/admin/workplace/sessions.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the searchfilter parameter, a different vector than CVE-2008-1510...
alkaconsessions-xss.txt
Alkacon OpenCms sessions.jsp searchfilter XSS Product: Alkacon OpenCms http://www.opencms.org/ OpenCms contains a cross-site scripting vulnerability in the active session reporting function. Input to parameter searchfilter in page opencms/system/workplace/admin/workplace/sessions.jsp is not...
Alkacon OpenCms sessions.jsp searchfilter XSS
Alkacon OpenCms sessions.jsp searchfilter XSS Product: Alkacon OpenCms http://www.opencms.org/ OpenCms contains a cross-site scripting vulnerability in the active session reporting function. Input to parameter searchfilter in page opencms/system/workplace/admin/workplace/sessions.jsp is not...
CVE-2008-1510
Cross-site scripting XSS vulnerability in system/workplace/admin/accounts/userslist.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the 1 searchfilter or 2 listSearchFilter parameter...
CVE-2008-1510
Cross-site scripting XSS vulnerability in system/workplace/admin/accounts/userslist.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the 1 searchfilter or 2 listSearchFilter parameter...
CVE-2008-1510
CVE-2008-1510 describes a Cross-site scripting (XSS) vulnerability in Alkacon OpenCMS 7.0.3, specifically in the page system/workplace/admin/accounts/users_list.jsp. An attacker can inject arbitrary script/HTML via the (1) searchfilter or (2) listSearchFilter parameters, potentially affecting use...
Alkacon OpenCms users_list.jsp searchfilter XSS
Alkacon OpenCms userslist.jsp searchfilter XSS Product: Alkacon OpenCms http://www.opencms.org/ OpenCms contains a cross-site scripting vulnerability in the user management function. Input to parameter searchfilter in page opencms/system/workplace/admin/accounts/userslist.jsp is not sufficiently...
CVE-2008-1510: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in system/workplace/admin/accounts/userslist.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the 1 searchfilter or 2 listSearchFilter parameter...
alkaconopencms-xss.txt
Alkacon OpenCms userslist.jsp searchfilter XSS Product: Alkacon OpenCms http://www.opencms.org/ OpenCms contains a cross-site scripting vulnerability in the user management function. Input to parameter searchfilter in page opencms/system/workplace/admin/accounts/userslist.jsp is not sufficiently...
Alkacon OpenCMS 7.0.3 - users_list.jsp Multiple Cross-Site Scripting Vulnerabilities
Alkacon OpenCMS 7.0.3 - userslist.jsp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/28411/info Alkacon OpenCms is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker ma...