Lucene search
Veracode Vulnerability DatabaseVERACODE:21391HistoryAug 28, 2019 - 8:16 a.m.
Local File Inclusion (LFI)
2019-08-2808:16:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
EPSS
0.007
Percentile
80.9%
opencms-core is vulnerable to local file inclusion (LFI) vulnerability. It is possible because server resources such as: clearhistory.jsp, convertxml.jsp, group_new.jsp, loginmessage.jsp, xmlcontentrepair.jsp, and /system/workplace/admin/history/settings/index.jsp are accessible by the attacker through the management interface.
Related
nvd
nvd
CVE-2019-13237
2019-08-27 12:15:12
cvelist
cvelist
CVE-2019-13237
2019-08-27 11:11:06
osv
osv
CVE-2019-13237
2019-08-27 12:15:12
exploitpack
exploitpack
Alkacon OpenCMS 10.5.x - Local File inclusion
2019-09-02 00:00:00
exploitdb
exploitdb
Alkacon OpenCMS 10.5.x - Local File inclusion
2019-09-02 00:00:00
cve
cve
CVE-2019-13237
2019-08-27 12:15:12
zdt
zdt
Alkacon OpenCMS 10.5.x - Local File inclusion Vulnerability
2019-09-02 00:00:00
packetstorm
packetstorm
Alkacon OpenCMS 10.5.x Local File Inclusion
2019-09-02 00:00:00
github
github
prion
prion
Design/Logic Flaw
2019-08-27 12:15:00