CVE-2006-3936

no score yetEPSS 1.4%

system/workplace/editors/editor.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to read the source code of arbitrary JSP files by specifying the file in the resource parameter, as demonstrated using index.jsp.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
Published: 2006-07-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

alkacon:opencms

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-c5vw-342h-x5rx	Maven	org.opencms:opencms-core	<6.2.2	6.2.2

References

http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt
http://secunia.com/advisories/21193
http://securityreason.com/securityalert/1302
http://www.opencms.org/export/download/opencms/opencms_6.2.2_src.zip
http://www.opencms.org/opencms/en/shownews.html?id=1002

Check your stack JSON