Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

apache roller 4.0 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2

CVE-2013-4171

Multiple cross-site scripting (XSS) vulnerabilities in Apache Roller prior to 5.0.2 allow remote malicious users to inject arbitrary web script or HTML via vectors related to the search results in the (1) RSS and (2) Atom feed templates.
Apache RollerApache Roller 4.0Apache Roller 4.0.1Apache Roller 5.0
6.8
CVSSv2

CVE-2013-4212

Certain getText methods in the ActionSupport controller in Apache Roller prior to 5.0.2 allow remote malicious users to execute arbitrary OGNL expressions via the first or second parameter, as demonstrated by the pageTitle parameter in the !getPageTitle sub-URL to roller-ui/login...
Apache RollerApache Roller 4.0Apache Roller 4.0.1Apache Roller 5.0
4.3
CVSSv2

CVE-2008-6879

Cross-site scripting (XSS) vulnerability in Apache Roller 2.3, 3.0, 3.1, and 4.0 allows remote malicious users to inject arbitrary web script or HTML via the q parameter in a search action.
Apache Roller 2.3Apache Roller 3.0Apache Roller 3.1Apache Roller 4.0
9.8
CVSSv3

CVE-2014-0030

The XML-RPC protocol support in Apache Roller prior to 5.0.3 allows malicious users to conduct XML External Entity (XXE) attacks via unspecified vectors.
Apache Roller 3.1Apache Roller 4.0Apache Roller 4.0.1Apache Roller 5.0Apache Roller 5.0.1Apache Roller 5.0.2
3.5
CVSSv2

CVE-2012-2381

Multiple cross-site scripting (XSS) vulnerabilities in Apache Roller prior to 5.0.1 allow remote authenticated users to inject arbitrary web script or HTML by leveraging the blogger role.
Apache RollerApache Roller 0.9.5Apache Roller 0.9.6Apache Roller 0.9.6.3Apache Roller 0.9.6.4Apache Roller 0.9.7Apache Roller 0.9.7.1Apache Roller 0.9.7.2Apache Roller 0.9.8Apache Roller 0.9.8.1Apache Roller 0.9.8.2Apache Roller 0.9.9
6.8
CVSSv2

CVE-2012-2380

Multiple cross-site request forgery (CSRF) vulnerabilities in the admin/editor console in Apache Roller prior to 5.0.1 allow remote malicious users to hijack the authentication of admins or editors by leveraging the HTTP POST functionality.
Apache RollerApache Roller 0.9.5Apache Roller 0.9.6Apache Roller 0.9.6.3Apache Roller 0.9.6.4Apache Roller 0.9.7Apache Roller 0.9.7.1Apache Roller 0.9.7.2Apache Roller 0.9.8Apache Roller 0.9.8.1Apache Roller 0.9.8.2Apache Roller 0.9.9
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
viasatdoscross-site request forgeryteconcethemeCVE-2025-1565CVE-2025-28076firmwarez2dweb serverCVE-2025-2070CVE-2025-3645CVE-2025-31324CVE-2024-6235
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook