erral

24 exploits Active since Sep 2014
CVE-2012-5485 WRITEUP WRITEUP
Plone < 4.2.3 - Remote Code Execution via Admin Interface
registerConfiglet.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via unspecified vectors, related to the admin interface.
CVE-2012-5487 WRITEUP WRITEUP
Plone <4.2.3, <4.3 - Beta 1 - Auth Bypass
The sandbox whitelisting function (allowmodule.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain privileges to bypass the Python sandbox restriction and execute arbitrary Python code via vectors related to importing.
CVE-2012-5488 WRITEUP WRITEUP
Plone < 4.2.3 - Remote Code Execution via createObject
python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to createObject.
CVE-2012-5489 WRITEUP WRITEUP
Zope <2.12.21, <3.13.x - Privilege Escalation
The App.Undo.UndoSupport.get_request_var_or_attr function in Zope before 2.12.21 and 3.13.x before 2.13.11, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote authenticated users to gain access to restricted attributes via unspecified vectors.
CVE-2012-5490 WRITEUP WRITEUP
Plone < 4.2.3 - Cross-Site Scripting via kssdevel.py
Cross-site scripting (XSS) vulnerability in kssdevel.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-5491 WRITEUP WRITEUP
z3c.form <4.2.3,4.3 - Info Disclosure
z3c.form, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain the default form field values by leveraging knowledge of the form location and the element id.
CVE-2012-5492 WRITEUP WRITEUP
Plone <4.2.3, <4.3 - Info Disclosure
uid_catalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to obtain metadata about hidden objects via a crafted URL.
CVE-2012-5493 WRITEUP WRITEUP
Plone <4.2.3, <4.3 - Beta 1 - Auth Bypass
gtbn.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain permissions to bypass the Python sandbox and execute arbitrary Python code via unspecified vectors.
CVE-2012-5494 WRITEUP WRITEUP
Plone < 4.2.3 - Cross-Site Scripting via Translate Function
Cross-site scripting (XSS) vulnerability in python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "{u,}translate."
CVE-2012-5495 WRITEUP WRITEUP
Plone < 4.2.3 - Remote Code Execution via Crafted URL
python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to "go_back."
CVE-2012-5496 WRITEUP WRITEUP
Plone < 4.0 - Denial of Service via Kupu Spellcheck URL
kupu_spellcheck.py in Kupu in Plone before 4.0 allows remote attackers to cause a denial of service (ZServer thread lock) via a crafted URL.
CVE-2012-5497 WRITEUP WRITEUP
Plone <4.2.3, <4.3 - Info Disclosure
membership_tool.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to enumerate user account names via a crafted URL.
CVE-2012-5498 WRITEUP WRITEUP
Plone < 4.2.3 - Denial of Service via queryCatalog.py
queryCatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to bypass caching and cause a denial of service via a crafted request to a collection.
CVE-2012-5499 WRITEUP WRITEUP
Plone < 4.2.3 - Denial of Service via Large Value in formatColumns
python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a denial of service (memory consumption) via a large value, related to formatColumns.
CVE-2012-5500 WRITEUP WRITEUP
Plone < 4.2.3 - Cross-Site Request Forgery via Batch ID Change Script
The batch id change script (renameObjectsByPaths.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request.
CVE-2012-5501 WRITEUP WRITEUP
Plone <4.2.3, <4.3 - Info Disclosure
at_download.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read arbitrary BLOBs (Files and Images) stored on custom content types via a crafted URL.
CVE-2012-5502 WRITEUP WRITEUP
Plone < 4.2.3 - Authenticated Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in safe_html.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with permissions to edit content to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-5503 WRITEUP WRITEUP
Plone <4.2.3, <4.3 - Info Disclosure
ftp.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read hidden folder contents via unspecified vectors.
CVE-2012-5504 WRITEUP WRITEUP
Plone < 4.2.2 - Cross-Site Scripting via widget_traversal.py
Cross-site scripting (XSS) vulnerability in widget_traversal.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-5505 WRITEUP WRITEUP
Plone <4.2.3, <4.3 - Info Disclosure
atat.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read private data structures via a request for a view without a name.
CVE-2012-5506 WRITEUP WRITEUP
Plone < 4.2.3 - Denial of Service via RSS Feed Request
python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a denial of service (infinite loop) via an RSS feed request for a folder the user does not have permission to access.
CVE-2012-5507 WRITEUP WRITEUP
Zope < 2.13.19 and Plone < 4.2.3 - Remote Password Exposure via Timing Attack
AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain passwords via vectors involving timing discrepancies in password validation.
CVE-2012-5508 WRITEUP WRITEUP
Plone <4.2.3, <4.3 beta - Info Disclosure
The error pages in Plone before 4.2.3 and 4.3 before beta 1 allow remote attackers to obtain random numbers and derive the PRNG state for password resets via unspecified vectors. NOTE: this identifier was SPLIT per ADT2 due to different vulnerability types. CVE-2012-6661 was assigned for the PRNG reseeding issue in Zope.
CVE-2012-6661 WRITEUP WRITEUP
Plone < 4.2.2 - Predictable PRNG Value via Insufficient Reseeding
Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed the pseudo-random number generator (PRNG), which makes it easier for remote attackers to guess the value via unspecified vectors. NOTE: this issue was SPLIT from CVE-2012-5508 due to different vulnerability types (ADT2).