Secunia

Meder Kydyraliev has reported some vulnerabilities in Alkacon OpenCms, which can be exploited by malicious users to conduct script insertion attacks, disclose certain sensitive information, and to perform certain actions with escalated privileges.

1) Improper checks of privileges in the administration section can be exploited by malicious users to disclose the contents of certain files on the system, disclose the source code of .jsp files, add new "Webusers", disclose a list of all users, and send broadcast messages to all users.

2) Input passed to "Message" form field when sending a broadcast message is not properly sanitised before being used. This can be exploited to insert arbitrary HTML and script code, which is executed in a user's browser session in context of an affected site when the malicious message is viewed.

The vulnerabilities have been reported in version 6.2.1. Prior versions may also be affected.

Solution
Update to version 6.2.2.

Provided and/or discovered by
Meder Kydyraliev

Changelog
Further details available in Customer Area

Original Advisory
http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt

Deep Links
Links available in Customer Area