Detections
Analytics
OpenCms Multiple Input Validation Vulnerabilities
medium Nessus Network Monitor Plugin ID 5207
Synopsis
The remote web server is vulnerable to multiple attack vectors.Description
The remote web server is running Alkacon OpenCms, a web-based content management system. The installed version is earlier than 7.5.1. Such versions are potentially affected by multiple issues :- Multiple cross-site scripting issues.
- Multiple SQL-injection issues.
- Multiple input-validation vulnerabilities that allow 'phishing through frames' attacks.
- Multiple input-validation vulnerabilities that may results in information disclosure.