hannosch

CVE-2012-5485 WRITEUP WRITEUP

Plone <4.2.3 & <4.3 - Beta 1 - RCE

registerConfiglet.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via unspecified vectors, related to the admin interface.

View Code

CVE-2012-5487 WRITEUP WRITEUP

Plone <4.2.3, <4.3 - Beta 1 - Auth Bypass

The sandbox whitelisting function (allowmodule.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain privileges to bypass the Python sandbox restriction and execute arbitrary Python code via vectors related to importing.

View Code

CVE-2012-5488 WRITEUP WRITEUP

Plone <4.2.3 & <4.3 - Beta 1 - RCE

python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to createObject.

View Code

CVE-2012-5489 WRITEUP WRITEUP

Zope <2.12.21, <3.13.x - Privilege Escalation

The App.Undo.UndoSupport.get_request_var_or_attr function in Zope before 2.12.21 and 3.13.x before 2.13.11, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote authenticated users to gain access to restricted attributes via unspecified vectors.

View Code

CVE-2012-5490 WRITEUP WRITEUP

Plone <4.2.3, 4.3 -beta 1 - XSS

Cross-site scripting (XSS) vulnerability in kssdevel.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

View Code

CVE-2012-5491 WRITEUP WRITEUP

z3c.form <4.2.3,4.3 - Info Disclosure

z3c.form, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain the default form field values by leveraging knowledge of the form location and the element id.

View Code

CVE-2012-5492 WRITEUP WRITEUP

Plone <4.2.3, <4.3 - Info Disclosure

uid_catalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to obtain metadata about hidden objects via a crafted URL.

View Code

CVE-2012-5495 WRITEUP WRITEUP

Plone <4.2.3, <4.3 - Beta 1 - RCE

python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to "go_back."

View Code

CVE-2012-5496 WRITEUP WRITEUP

Kupu <4.0 - DoS

kupu_spellcheck.py in Kupu in Plone before 4.0 allows remote attackers to cause a denial of service (ZServer thread lock) via a crafted URL.

View Code

CVE-2012-5497 WRITEUP WRITEUP

Plone <4.2.3, <4.3 - Info Disclosure

membership_tool.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to enumerate user account names via a crafted URL.

View Code

CVE-2012-5498 WRITEUP WRITEUP

Plone <4.2.3, <4.3 - DoS

queryCatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to bypass caching and cause a denial of service via a crafted request to a collection.

View Code

CVE-2012-5499 WRITEUP WRITEUP

Plone <4.2.3, <4.3 - DoS

python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a denial of service (memory consumption) via a large value, related to formatColumns.

View Code

CVE-2012-5500 WRITEUP WRITEUP

Plone <4.2.3, <4.3 - Beta 1 - CSRF

The batch id change script (renameObjectsByPaths.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request.

View Code

CVE-2012-5502 WRITEUP WRITEUP

Plone <4.2.3, 4.3 -beta 1 - XSS

Cross-site scripting (XSS) vulnerability in safe_html.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with permissions to edit content to inject arbitrary web script or HTML via unspecified vectors.

View Code

CVE-2012-5503 WRITEUP WRITEUP

Plone <4.2.3, <4.3 - Info Disclosure

ftp.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read hidden folder contents via unspecified vectors.

View Code

CVE-2012-5504 WRITEUP WRITEUP

Plone <4.2.3, <4.3 - Beta 1 - XSS

Cross-site scripting (XSS) vulnerability in widget_traversal.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

View Code

CVE-2012-5505 WRITEUP WRITEUP

Plone <4.2.3, <4.3 - Info Disclosure

atat.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read private data structures via a request for a view without a name.

View Code

CVE-2012-5506 WRITEUP WRITEUP

Plone <4.2.3, <4.3 - DoS

python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a denial of service (infinite loop) via an RSS feed request for a folder the user does not have permission to access.

View Code

CVE-2012-5507 WRITEUP WRITEUP

Zope <2.13.19 - Info Disclosure

AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain passwords via vectors involving timing discrepancies in password validation.

View Code

CVE-2012-5508 WRITEUP WRITEUP

Plone <4.2.3, <4.3 beta - Info Disclosure

The error pages in Plone before 4.2.3 and 4.3 before beta 1 allow remote attackers to obtain random numbers and derive the PRNG state for password resets via unspecified vectors. NOTE: this identifier was SPLIT per ADT2 due to different vulnerability types. CVE-2012-6661 was assigned for the PRNG reseeding issue in Zope.

View Code

CVE-2012-6661 WRITEUP WRITEUP

Plone < 4.2.2 - Cryptographic Issue

Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed the pseudo-random number generator (PRNG), which makes it easier for remote attackers to guess the value via unspecified vectors. NOTE: this issue was SPLIT from CVE-2012-5508 due to different vulnerability types (ADT2).

View Code