First published: Tue Mar 25 2008(Updated: )
Cross-site scripting (XSS) vulnerability in system/workplace/admin/accounts/users_list.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the (1) searchfilter or (2) listSearchFilter parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Alkacon OpenCMS | =7.0.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-1510 has been classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
To fix CVE-2008-1510, it is recommended to upgrade Alkacon OpenCMS to the latest version that addresses the cross-site scripting vulnerability.
CVE-2008-1510 allows remote attackers to execute arbitrary web scripts or HTML through crafted input in specified parameters.
Alkacon OpenCMS version 7.0.3 is specifically vulnerable to CVE-2008-1510.
Yes, there are known exploits for CVE-2008-1510 that facilitate cross-site scripting attacks on affected systems.