CVE-2006-3936
published 2006-07-31CVE-2006-3936: system/workplace/editors/editor.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to read the source code of arbitrary JSP files by…
PriorityP417medium4CVSS 2.0
AVNACLAuSCPINAN
EPSS
1.36%
68.2th percentile
system/workplace/editors/editor.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to read the source code of arbitrary JSP files by specifying the file in the resource parameter, as demonstrated using index.jsp.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| alkacon | opencms | — | — |
| alkacon | opencms | — | — |
| alkacon | opencms | — | — |
| alkacon | opencms | — | — |
| alkacon | opencms | — | — |
| alkacon | opencms | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Alkacon OpenCms Exposes JSP Source Code
ghsa·2022-05-01
CVE-2006-3936 [MEDIUM] CWE-200 Alkacon OpenCms Exposes JSP Source Code
Alkacon OpenCms Exposes JSP Source Code
`system/workplace/editors/editor.jsp` in Alkacon OpenCms before 6.2.2 allows remote authenticated users to read the source code of arbitrary JSP files by specifying the file in the resource parameter, as demonstrated using `index.jsp`.
OSV
Alkacon OpenCms Exposes JSP Source Code
osv·2022-05-01
CVE-2006-3936 [MEDIUM] Alkacon OpenCms Exposes JSP Source Code
Alkacon OpenCms Exposes JSP Source Code
`system/workplace/editors/editor.jsp` in Alkacon OpenCms before 6.2.2 allows remote authenticated users to read the source code of arbitrary JSP files by specifying the file in the resource parameter, as demonstrated using `index.jsp`.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txthttp://secunia.com/advisories/21193http://securityreason.com/securityalert/1302http://www.opencms.org/export/download/opencms/opencms_6.2.2_src.ziphttp://www.opencms.org/opencms/en/shownews.html?id=1002http://www.securityfocus.com/archive/1/441182/100/0/threadedhttps://exchange.xforce.ibmcloud.com/vulnerabilities/28001http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txthttp://secunia.com/advisories/21193http://securityreason.com/securityalert/1302http://www.opencms.org/export/download/opencms/opencms_6.2.2_src.ziphttp://www.opencms.org/opencms/en/shownews.html?id=1002http://www.securityfocus.com/archive/1/441182/100/0/threadedhttps://exchange.xforce.ibmcloud.com/vulnerabilities/28001
2006-07-31
Published