What’s Vulnerable › Vulnerabilities
CVE-2006-6588
- Severity: high (CVSS 7.5 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.3% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2006-12-15 · updated 2026-06-16
Description
The forum implementation in the ecommerce component in the Apache Open For Business Project (OFBiz) trusts the (1) dataResourceTypeId, (2) contentTypeId, and certain other hidden form fields, which allows remote attackers to create unauthorized types of content, modify content, or have other unknown impact.
Affected products
- Apache Software Foundation Apache OFBiz: all versions
References
Get alerted when CVE-2006-6588 or the next vulnerability affects your stack