Skip to content
OpenAdvisories

Archive

March 2008

Vulnerabilities first published in this month (UTC), newest first.

2 results · Clear filters · Feed

  • Low —
    CVE-2008-1510 Public exploit

    Alkacon OpenCMS XSS via searchfilter or listSearchFilter parameter

    Cross-site scripting (XSS) vulnerability in system/workplace/admin/accounts/users_list.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the (1) searchfilter or (2) listSearchFilter parameter.

  • Low —
    CVE-2008-1300 Public exploit

    Alkacon Open CMS XSS via Logfile Viewer Settings function

    Cross-site scripting (XSS) vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the …