CVE-2013-4600

Multiple cross-site scripting XSS vulnerabilities in Alkacon OpenCms before 8.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 title parameter to system/workplace/views/admin/admin-main.jsp or the 2 requestedResource parameter to system/login/index.html...

PT-2013-5088

Name of the Vulnerable Software and Affected Versions Alkacon OpenCms versions prior to 8.5.2 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the title parameter to "system/workplace/views/admin/admin-main.jsp" or the requestedResourc...

CVE-2013-4600: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Alkacon OpenCms before 8.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 title parameter to system/workplace/views/admin/admin-main.jsp or the 2 requestedResource parameter to system/login/index.html...