VULNERABILITY INTELLIGENCE

CVE-2006-6588

CVSS score7.5 NONE
EPSS probability2.32%
CISA KEVNot currently listed
Published2006-12-15
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The forum implementation in the ecommerce component in the Apache Open For Business Project (OFBiz) trusts the (1) dataResourceTypeId, (2) contentTypeId, and certain other hidden form fields, which allows remote attackers to create unauthorized types of content, modify content, or have other unknown impact.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references