CVE-2006-6588 Information

Description

The forum implementation in the ecommerce component in the Apache Open For Business Project (OFBiz) trusts the (1) dataResourceTypeId (2) contentTypeId and certain other hidden form fields which allows remote attackers to create unauthorized types of content modify content or have other unknown impact.

Reference

https://issues.apache.org/jira/browse/OFBIZ-178