Opencms Security Vulnerabilities and Issues — Opencms CVE List

Lucene search

AlkaconOpencms

3 matches found

CVE•added 2008/03/25 11:44 p.m.•45 views

CVE-2008-1510

Cross-site scripting (XSS) vulnerability in system/workplace/admin/accounts/users_list.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the (1) searchfilter or (2) listSearchFilter parameter.

4.3CVSS5.5AI score0.00346EPSS

CVE•added 2008/03/12 5:44 p.m.•43 views

CVE-2008-1301

Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote authenticated administrators to read arbitrary files via a full pathname in the filePath.0 parameter.

4CVSS6.3AI score0.01916EPSS

CVE•added 2008/03/12 5:44 p.m.•37 views

CVE-2008-1300

Cross-site scripting (XSS) vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the filePath.0 parameter in a save action, a...

4.3CVSS5.7AI score0.00334EPSS