VendorsAlkaconopencms_apollo_template10.5.4
Vulnerabilities

Alkacon OpenCms Apollo Template 10.5.4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2019-13234
In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the search engine.
Published 2019-08-27 · Modified
6.11 PoCEPSS 0.029
CVE-2019-13235
In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.
Published 2019-08-27 · Modified
6.11 PoCEPSS 0.029
CVE-2019-13237
In Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple resources vulnerable to Local File Inclusion that allow an attacker to access server resources: clearhistory.jsp, convertxml.jsp, group_new.jsp, loginmessage.jsp, xmlcontentrepair.jsp, and /system/workplace/admin/history/settings/index.jsp.
Published 2019-08-27 · Modified
4.31 PoCEPSS 0.073