Alkacon

Opencms

36 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.6

CVE-2018-8815

Exploit
  • EPSS 1.41%
  • Veröffentlicht 20.03.2018 07:29:00
  • Zuletzt bearbeitet 21.11.2024 04:14:22

Cross-site scripting (XSS) vulnerability in the gallery function in Alkacon OpenCMS 10.5.3 allows remote attackers to inject arbitrary web script or HTML via a malicious SVG image.

8.8

CVE-2018-8811

Exploit
  • EPSS 2.23%
  • Veröffentlicht 20.03.2018 07:29:00
  • Zuletzt bearbeitet 21.11.2024 04:14:22

Cross-site request forgery (CSRF) vulnerability in system/workplace/admin/accounts/user_role.jsp in OpenCMS 10.5.3 allows remote attackers to hijack the authentication of administrative users for requests that perform privilege escalation. Note: It i...

4.3

CVE-2015-2351

Exploit
  • EPSS 1.91%
  • Veröffentlicht 19.03.2015 14:59:03
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Multiple cross-site scripting (XSS) vulnerabilities in Alkacon OpenCms 9.5.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) homelink parameter to system/modules/org.opencms.workplace.help/jsptemplates/help_head....

4.3

CVE-2013-4600

Exploit
  • EPSS 1.88%
  • Veröffentlicht 09.08.2013 21:55:07
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Multiple cross-site scripting (XSS) vulnerabilities in Alkacon OpenCms before 8.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) title parameter to system/workplace/views/admin/admin-main.jsp or the (2) requestedResource ...

4.3

CVE-2008-1753

Exploit
  • EPSS 1.11%
  • Veröffentlicht 11.04.2008 21:05:00
  • Zuletzt bearbeitet 16.06.2026 22:52:25

Cross-site scripting (XSS) vulnerability in system/workplace/admin/workplace/sessions.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the searchfilter parameter, a different vector than CVE-2008-1510.

4.3

CVE-2008-1510

  • EPSS 1.46%
  • Veröffentlicht 25.03.2008 23:44:00
  • Zuletzt bearbeitet 16.06.2026 22:51:53

Cross-site scripting (XSS) vulnerability in system/workplace/admin/accounts/users_list.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the (1) searchfilter or (2) listSearchFilter parameter.

4

CVE-2008-1301

Exploit
  • EPSS 2.26%
  • Veröffentlicht 12.03.2008 17:44:00
  • Zuletzt bearbeitet 16.06.2026 22:51:27

Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote authenticated administrators to read arbitrary files via a full pathname in the filePath.0 ...

4.3

CVE-2008-1300

Exploit
  • EPSS 1.51%
  • Veröffentlicht 12.03.2008 17:44:00
  • Zuletzt bearbeitet 16.06.2026 22:51:27

Cross-site scripting (XSS) vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote attackers to inject arbitrary web script or HTML...

4.3

CVE-2008-1045

Exploit
  • EPSS 1.47%
  • Veröffentlicht 27.02.2008 19:44:00
  • Zuletzt bearbeitet 16.06.2026 22:50:52

Cross-site scripting (XSS) vulnerability in the file tree navigation function in system/workplace/views/explorer/tree_files.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the resource parameter.

4

CVE-2006-3936

Exploit
  • EPSS 1.35%
  • Veröffentlicht 31.07.2006 22:04:00
  • Zuletzt bearbeitet 16.06.2026 22:28:06

system/workplace/editors/editor.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to read the source code of arbitrary JSP files by specifying the file in the resource parameter, as demonstrated using index.jsp.