GCVE - cpe:2.3:a:alkacon:opencms:7.0.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:alkacon:opencms:7.0.3:*:*:*:*:*:*:*

part: a version: 7.0.3 update: *

Vendor	Alkacon (`3bbcd211-d08b-568f-b8a5-0c270556c43d`)
Product	Opencms (`443c1ba7-ecf6-55d1-8f09-8482e1caa421`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/alkacon/opencms-core`	purl2cpe	2026-06-01 10:16:11.142795
`pkg:maven/org.opencms/opencms-core`	purl2cpe	2026-06-01 10:16:11.142797

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-4600`	vulnerable	2026-06-08 05:04:48.686759	Details available Multiple cross-site scripting (XSS) vulnerabilities in Alkacon OpenCms before 8.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) title parameter to system/workplace/views/admin/admin-main.jsp or the (2) requestedResource parameter to system/login/index.html. Published: 2013-08-09T21:00:00.000Z Updated: 2024-09-16T16:42:52.265Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/bugtraq/2013-07/0113.html https://github.com/alkacon/opencms-core/issues/173 http://www.opencms.org/en/news/130710-opencms-v852-releasenotes.html https://www.htbridge.com/advisory/HTB23160	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1753`	vulnerable	2026-06-08 04:50:21.719162	Details available Cross-site scripting (XSS) vulnerability in system/workplace/admin/workplace/sessions.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the searchfilter parameter, a different vector than CVE-2008-1510. Published: 2008-04-11T20:28:00.000Z Updated: 2024-08-07T08:32:01.288Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/41675 http://www.securityfocus.com/archive/1/490498/100/0/threaded http://www.securityfocus.com/archive/1/490710/100/0/threaded http://www.securityfocus.com/bid/28637 http://securityreason.com/securityalert/3808	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1510`	vulnerable	2026-06-08 04:50:20.847845	Details available Cross-site scripting (XSS) vulnerability in system/workplace/admin/accounts/users_list.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the (1) searchfilter or (2) listSearchFilter parameter. Published: 2008-03-25T23:00:00.000Z Updated: 2024-08-07T08:24:42.357Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/28411 http://securityreason.com/securityalert/3777 https://exchange.xforce.ibmcloud.com/vulnerabilities/41390 http://www.securityfocus.com/archive/1/489984/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1301`	vulnerable	2026-06-08 04:50:19.887943	Details available Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote authenticated administrators to read arbitrary files via a full pathname in the filePath.0 parameter. Published: 2008-03-12T17:00:00.000Z Updated: 2024-08-07T08:17:34.095Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/28152 http://securityreason.com/securityalert/3731 http://secunia.com/advisories/29278 https://exchange.xforce.ibmcloud.com/vulnerabilities/41096 http://www.securityfocus.com/archive/1/489291/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1300`	vulnerable	2026-06-08 04:50:19.886649	Details available Cross-site scripting (XSS) vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the filePath.0 parameter in a save action, a different vector than CVE-2008-1045. Published: 2008-03-12T17:00:00.000Z Updated: 2024-08-07T08:17:34.502Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/28152 https://exchange.xforce.ibmcloud.com/vulnerabilities/41095 http://securityreason.com/securityalert/3731 http://secunia.com/advisories/29278 http://www.securityfocus.com/archive/1/489291/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1045`	vulnerable	2026-06-08 04:50:18.664346	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.