CVE-2006-3933

Опубликовано: 31 июл. 2006

Источник: nvd

CVSS2: 3.5

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.2.2 allows remote authenticated users to inject arbitrary web script or HTML via the message body.

Ссылки

http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt
Exploit
http://secunia.com/advisories/21193
Exploit
Patch
Vendor Advisory
http://securityreason.com/securityalert/1302
http://www.opencms.org/export/download/opencms/opencms_6.2.2_src.zip
Patch
http://www.opencms.org/opencms/en/shownews.html?id=1002
Patch
http://www.securityfocus.com/archive/1/441182/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/28033
http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt
Exploit
http://secunia.com/advisories/21193
Exploit
Patch
Vendor Advisory
http://securityreason.com/securityalert/1302
http://www.opencms.org/export/download/opencms/opencms_6.2.2_src.zip
Patch
http://www.opencms.org/opencms/en/shownews.html?id=1002
Patch
http://www.securityfocus.com/archive/1/441182/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/28033

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:alkacon:opencms:*:*:*:*:*:*:*:*

Версия до 6.2.1 (включая)

cpe:2.3:a:alkacon:opencms:6.0.0:*:*:*:*:*:*:*

cpe:2.3:a:alkacon:opencms:6.0.2:*:*:*:*:*:*:*

cpe:2.3:a:alkacon:opencms:6.0.3:*:*:*:*:*:*:*

cpe:2.3:a:alkacon:opencms:6.0.4:*:*:*:*:*:*:*

cpe:2.3:a:alkacon:opencms:6.2:*:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.00475

Низкий

3.5 Low

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-gj9c-69cm-7c37

github

почти 4 года назад

Alkacon OpenCms XSS via unsanitized message body