Alkacon OpenCMS XSS via searchfilter parameter in system/workplace/admin/workplace/sessions.jsp

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2008-1753 · ADVISORY
• exchange.xforce.ibmcloud.com/vulnerabilities/41675 · WEB
• alkacon/opencms-core · WEB
• securityreason.com/securityalert/3808 · WEB
• securityfocus.com/archive/1/490498/100/0/threaded
• securityfocus.com/archive/1/490710/100/0/threaded
• securityfocus.com/bid/28637 · Exploit

Lỗ hổng khác của org.opencms:opencms-core

• CVE-2023-42346CAO 7.5Alkacon OpenCms before 16 allows XXE when the <!DOCTYPE> refers to an external host.
• CVE-2023-42345TRUNG BÌNH 6.1A Cross Site Scripting vulnerability in Alkacon OpenCms before 16 exists via updateModelGroups.jsp.
• CVE-2023-42344CAO 7.3Alkacon OpenCms before 10.5.1 allows remote unauthenticated attackers to obtain sensitive information via a cmis-online/query XXE attack on …
• CVE-2023-42343TRUNG BÌNH 6.1A Cross Site Scripting vulnerability in Alkacon OpenCms before 10.5.1 exists via cmis-online/type.
• CVE-2024-42699TRUNG BÌNH 6.5Cross Site Scripting vulnerability in Create/Modify article function in Alkacon OpenCMS 17.0 allows remote attacker to inject javascript pay…