Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 31
Reset filtersAlkacon OpenCms allows remote unauthenticated attackers to obtain sensitive information
Alkacon OpenCms is vulnerable to XXE when the <!DOCTYPE> refers to an external host
Alkacon OpenCms is vulnerable to XSS via updateModelGroups.jsp
OpenCMS Cross-Site Scripting vulnerability
OpenCMS cross-site scripting (XSS) vulnerability
Alkacon OpenCMS stored cross-site scripting (XSS) vulnerability
OpenCMS Cross-Site Scripting vulnerability
Alkacon OpenCMS XSS via Mercury template
Alkacon OpenCMS arbitrary file upload vulnerability
alkacon-OpenCMS vulnerable to stored Cross-site Scripting
Alkacon OpenCMS XSS via New User module
Alkacon OpenCMS CSV Injection via New User module
Alkacon OpenCMS XSS via title and requestedResource parameters
Alkacon OpenCMS XSS via homelink, workplaceresource, mode and query parameters
Alkacon OpenCMS XSS via searchfilter parameter in system/workplace/admin/workplace/sessions.jsp
Alkacon OpenCMS XSS via searchfilter or listSearchFilter parameter
Alkacon OpenCMS Absolute Path Traversal via pathname in filePath.0 parameter
Alkacon Open CMS XSS via Logfile Viewer Settings function
Alkacon OpenCMS XSS via file tree navigation in system/workplace/views/explorer/tree_files.jsp
Alkacon OpenCMS Improper Access Control via system/workplace/views/admin/admin-main.jsp
Alkacon OpenCms Exposes JSP Source Code
Alkacon OpenCMS Absolute Path Traversal via pathname in filePath parameter
Alkacon OpenCms XSS via unsanitized message body
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.