Skip to content
OpenAdvisories

Package · Maven

org.opencms:opencms-core

31 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Low —
    CVE-2019-11818

    Alkacon OpenCMS XSS via New User module

    Alkacon OpenCMS v10.5.4 and before is affected by stored cross site scripting (XSS) in the module New User (/opencms/system/workplace/admin/accounts/user_new.jsp). This allows an attacker to insert arbitrary JavaScript as user input (First Name or Last Name),…

    org.opencms:opencms-core Maven
  • Low —
    CVE-2015-2351

    Alkacon OpenCMS XSS via homelink, workplaceresource, mode and query parameters

    Multiple cross-site scripting (XSS) vulnerabilities in Alkacon OpenCms 9.5.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) homelink parameter to system/modules/org.opencms.workplace.help/jsptemplates/help_head.jsp, (2) …

    org.opencms:opencms-core Maven
  • Low —
    CVE-2013-4600

    Alkacon OpenCMS XSS via title and requestedResource parameters

    Multiple cross-site scripting (XSS) vulnerabilities in Alkacon OpenCms before 8.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) title parameter to system/workplace/views/admin/admin-main.jsp or the (2) requestedResource parameter…

    org.opencms:opencms-core Maven
  • Low —
    CVE-2008-1753

    Alkacon OpenCMS XSS via searchfilter parameter in system/workplace/admin/workplace/sessions.jsp

    Cross-site scripting (XSS) vulnerability in system/workplace/admin/workplace/sessions.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the searchfilter parameter, a different vector than CVE-2008-1510.

    org.opencms:opencms-core Maven
  • Low —
    CVE-2008-1510 Public exploit

    Alkacon OpenCMS XSS via searchfilter or listSearchFilter parameter

    Cross-site scripting (XSS) vulnerability in system/workplace/admin/accounts/users_list.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the (1) searchfilter or (2) listSearchFilter parameter.

    org.opencms:opencms-core Maven
  • Low —
    CVE-2008-1300 Public exploit

    Alkacon Open CMS XSS via Logfile Viewer Settings function

    Cross-site scripting (XSS) vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the …

    org.opencms:opencms-core Maven
  • Low —
    CVE-2008-1045 Public exploit

    Alkacon OpenCMS XSS via file tree navigation in system/workplace/views/explorer/tree_files.jsp

    Cross-site scripting (XSS) vulnerability in the file tree navigation function in system/workplace/views/explorer/tree_files.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the resource parameter.

    org.opencms:opencms-core Maven
  • Low —
    CVE-2006-3933

    Alkacon OpenCms XSS via unsanitized message body

    Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.2.2 allows remote authenticated users to inject arbitrary web script or HTML via the message body.

    org.opencms:opencms-core Maven
  • Low —
    CVE-2006-2571

    Alkacon OpenCms XSS via query parameter in a search action

    Cross-site scripting (XSS) vulnerability in search.html in Alkacon OpenCms 6.0.0, 6.0.2, and 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search action.

    org.opencms:opencms-core Maven
  • Low —
    CVE-2005-4294

    Alkacon OpenCms XSS via username during login

    Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the username in the login page.

    org.opencms:opencms-core Maven