625 matches found
CVE-2006-3935: Undefined Security Weakness
system/workplace/views/admin/admin-main.jsp in Alkacon OpenCms before 6.2.2 does not restrict access to administrator functions, which allows remote authenticated users to 1 send broadcast messages to all users /workplace/broadcast, 2 list all users /accounts/users, 3 add webusers...
CVE-2006-3934: Improper Limitation of a Pathname to a Restricted Directory
Absolute path traversal vulnerability in downloadTrigger.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to download arbitrary files via an absolute pathname in the filePath parameter...
OpenCMS_multiple_vulnerabilities.txt
Multiple access control and input validation vulnerabilities in OpenCMS Open Source Website Content Management System 0. ORIGINAL ADVISORY http://o0o.nu/meder/OpenCMSmultiplevulnerabilities.txt I. BACKGROUND OpenCms is a professional level Open Source Website Content Management System. OpenCms...
OpenCms < 6.2.2 Multiple Vulnerabilities
The remote host is running OpenCms, a Java-based content management system. According to its banner, the version of OpenCms installed on the remote host reportedly allows authenticated users to upload OpenCms modules and database import/export files, download arbitrary files, send messages to all...
Multiple vulnerabilities in OpenCMS
Multiple access control and input validation vulnerabilities in OpenCMS Open Source Website Content Management System 0. ORIGINAL ADVISORY http://o0o.nu/meder/OpenCMSmultiplevulnerabilities.txt I. BACKGROUND OpenCms is a professional level Open Source Website Content Management System. OpenCms...
OpenCms < 6.2.2 Authentication Bypass
Binary data 3693.prm...
OpenCMS 6.06.2 - Multiple Unauthorized Access Vulnerabilities
OpenCMS 6.06.2 - Multiple Unauthorized Access Vulnerabilities source: https://www.securityfocus.com/bid/19174/info OpenCMS is prone to multiple unauthorized-access vulnerabilities because it fails to properly authenticate users when performing administrative tasks. An attacker can exploit these...
OpenCMS 6.0/6.2 - Multiple Unauthorized Access Vulnerabilities
source: https://www.securityfocus.com/bid/19174/info OpenCMS is prone to multiple unauthorized-access vulnerabilities because it fails to properly authenticate users when performing administrative tasks. An attacker can exploit these issues to view, delete, and modify application data. This could...
[MajorSecurity #11]OpenCMS<= 6.2.1 - XSS
MajorSecurity 11OpenCMS= 6.2.1 - XSS ------------------------------------------ Software: OpenCMS Version: =6.2.1 Type: Cross site scripting Date: June, 10th 2006 Vendor: Alkacon Software GmbH Page: http://www.alkacon.com http://www.opencms.org/opencms/en/ Credits: ----------------------------...
OpenCms version 6.0.x Xml Content Demo search engine Cross site scripting
Version: Tested on: - 6.0.0 - 6.0.2 - 6.0.3 Discovered by: jaime.blascoateazeldot.es http://www.eazel.es Description: Input passed to the search query in the Xml Content Demo search engine isn't properly sanitised. This can be exploited to conduct cross-site scripting attacks. Example:...
CVE-2006-2571
Cross-site scripting XSS vulnerability in search.html in Alkacon OpenCms 6.0.0, 6.0.2, and 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search action...
Cross site scripting
Cross-site scripting XSS vulnerability in search.html in Alkacon OpenCms 6.0.0, 6.0.2, and 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search action...
CVE-2006-2571
Cross-site scripting XSS vulnerability in search.html in Alkacon OpenCms 6.0.0, 6.0.2, and 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search action...
CVE-2006-2571
The CVE-2006-2571 entry refers to an XSS vulnerability in Alkacon OpenCms (versions 6.0.0, 6.0.2, 6.0.3) where arbitrary web script/HTML can be injected through the query parameter in a search action on search.html. This is triggered remotely via the vulnerable search feature, enabling script exe...
CVE-2006-2571: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search.html in Alkacon OpenCms 6.0.0, 6.0.2, and 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search action...
CVE-2005-4475
Cross-site scripting XSS vulnerability in OpenCms 6.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters...
CVE-2005-4475
Cross-site scripting XSS vulnerability in OpenCms 6.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters...
CVE-2005-4475
OpenCms 6.0.3 and earlier is affected by a Cross-site Scripting (XSS) vulnerability in unspecified search parameters. Root cause: improper handling of user-supplied search inputs leading to script/HTML injection. Impact (per provided data): partial confidentiality, integrity, and availability. No...
CVE-2005-4475: Undefined Security Weakness
Cross-site scripting XSS vulnerability in OpenCms 6.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters...
OpenCms XSS vuln.
OpenCms XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/opencms-xss-vuln.html vendor:http://www.opencms.org/ affected version:6.0.3 and prior Product Description: OpenCms is a professional level Open Source Website Content Management...