Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
apache ofbiz vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2013-2137
Cross-site scripting (XSS) vulnerability in the "View Log" screen in the Webtools application in Apache Open For Business Project (aka OFBiz) 10.04.01 up to and including 10.04.05, 11.04.01 up to and including 11.04.02, and 12.04.01 allows remote malicious users to inje...
Apache Ofbiz 10.04.02
Apache Ofbiz 10.04.04
Apache Ofbiz 10.04.01
Apache Ofbiz 11.04.01
Apache Ofbiz 11.04.02
Apache Ofbiz 12.04.01
Apache Ofbiz 10.04.03
Apache Ofbiz 10.04.05
10
CVSSv2
CVE-2013-2250
Apache Open For Business Project (aka OFBiz) 10.04.01 up to and including 10.04.05, 11.04.01 up to and including 11.04.02, and 12.04.01 allows remote malicious users to execute arbitrary Unified Expression Language (UEL) functions via JUEL metacharacters in unspecified parameters...
Apache Ofbiz 10.04.02
Apache Ofbiz 10.04.04
Apache Ofbiz 10.04.05
Apache Ofbiz 11.04.01
Apache Ofbiz 11.04.02
Apache Ofbiz 12.04.01
Apache Ofbiz 10.04.01
Apache Ofbiz 10.04.03
10
CVSSv2
CVE-2012-3506
Unspecified vulnerability in the Apache Open For Business Project (aka OFBiz) 10.04.x prior to 10.04.03 has unknown impact and attack vectors.
Apache Ofbiz 10.04.01
Apache Ofbiz 10.04.02
NA
CVE-2010-04323
Apache OFBiz suffers from multiple cross site scripting vulnerabilities.
4.3
CVSSv2
CVE-2010-0432
Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and previous versions, as used in Opentaps, Neogia, and Entente Oya, allow remote malicious users to inject arbitrary web script or HTML via (1) the productStoreId parame...
Apache Ofbiz
3 EDB exploits
6.8
CVSSv2
CVE-2006-6587
Cross-site scripting (XSS) vulnerability in the forum implementation in the ecommerce component in the Apache Open For Business Project (OFBiz) allows remote malicious users to inject arbitrary web script or HTML by posting a message.
Apache Ofbiz
7.5
CVSSv2
CVE-2006-6588
The forum implementation in the ecommerce component in the Apache Open For Business Project (OFBiz) trusts the (1) dataResourceTypeId, (2) contentTypeId, and certain other hidden form fields, which allows remote malicious users to create unauthorized types of content, modify cont...
Apache Ofbiz
6.8
CVSSv2
CVE-2006-6589
Cross-site scripting (XSS) vulnerability in ecommerce/control/keywordsearch in the Apache Open For Business Project (OFBiz) and Opentaps 0.9.3 allows remote malicious users to inject arbitrary web script or HTML via the SEARCH_STRING parameter, a different issue than CVE-2006-658...
Apache Ofbiz
Apache Opentaps 0.9.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4671
unauthorized
CVE-2024-4776
CVE-2024-3407
CVE-2024-26026
CVE-2024-32888
wireless
CVE-2024-4656
template injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5