Alkacon OpenCms "filePath" Cross-Site Scripting and File Disclosure

nnposter has discovered some vulnerabilities in Alkacon OpenCms, which can be exploited by malicious users to disclose potentially sensitive information and malicious people to conduct cross-site scripting attacks.


Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/

Feature Overview - The Secunia Software Inspector:
* Detects insecure versions of applications installed
* Verifies that all Microsoft patches are applied
* Assists you in updating your system and applications
* Runs through your browser. No installation or download is required.

Related Items