Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

plone plone 3.1.5.1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-0720
Unspecified vulnerability in Plone 2.5 up to and including 4.0, as used in Conga, luci, and possibly other products, allows remote malicious users to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.
Plone Plone 3.0.2Plone Plone 3.0.1Plone Plone 3.1.1Plone Plone 3.1.6Plone Plone 3.3.1Plone Plone 3.0.4Plone Plone 2.5.1Plone Plone 3.3.5Plone Plone 3.0.6Plone Plone 3.1.3Plone Plone 3.2Plone Plone 3.1.5.1Plone Plone 3.3.3Plone Plone 3.0Plone Plone 2.5Plone Plone 4.0Plone Plone 3.0.3Plone Plone 2.5.4Plone Plone 3.0.5Plone Plone 3.1Plone Plone 3.2.2Plone Plone 3.3
NA
CVE-2010-2422
Cross-site scripting (XSS) vulnerability in PortalTransforms in Plone 2.1 up to and including 3.3.4 before hotfix 20100612 allows remote malicious users to inject arbitrary web script or HTML via the safe_html transform.
Plone Plone 2.1Plone Plone 2.5Plone Plone 2.5.2Plone Plone 3.0.3Plone Plone 3.0.5Plone Plone 3.1.5.1Plone Plone 3.1.7Plone Plone 3.3Plone Plone 3.3.2Plone Plone 2.1.1Plone Plone 2.1.2Plone Plone 2.1.3Plone Plone 2.1.4Plone Plone 3.0.6Plone Plone 3.1Plone Plone 3.1.1Plone Plone 3.1.2Plone Plone 3.1.3Plone Plone 3.3.4Plone Plone 3.3.5Plone Plone 2.5.4Plone Plone 2.5.5
NA
CVE-2011-1949
Cross-site scripting (XSS) vulnerability in the safe_html filter in Products.PortalTransforms in Plone 2.1 up to and including 4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-2422.
Plone Plone 2.1.2Plone Plone 2.5.2Plone Plone 2.5.3Plone Plone 3.1.6Plone Plone 3.1.5.1Plone Plone 3.3.1Plone Plone 3.3Plone Plone 3.3.3Plone Plone 3.3.4Plone Plone 2.5.4Plone Plone 4.0.4Plone Plone 4.0.5Plone Plone 2.1.4Plone Plone 2.1.3Plone Plone 3.0Plone Plone 3.0.1Plone Plone 3.0.2Plone Plone 3.1.4Plone Plone 3.1.3Plone Plone 3.2.3Plone Plone 3.2.2Plone Plone 2.5.5
NA
CVE-2013-4200
The isURLInPortal method in the URLTool class in in_portal.py in Plone 2.1 up to and including 4.1, 4.2.x up to and including 4.2.5, and 4.3.x up to and including 4.3.1 treats URLs starting with a space as a relative URL, which allows remote malicious users to bypass the allow_ex...
Plone Plone 3.3Plone Plone 4.0.5Plone Plone 3.0.1Plone Plone 3.0Plone Plone 3.2.3Plone Plone 3.1.4Plone Plone 3.1.5.1Plone Plone 2.1.4Plone Plone 4.0.2Plone Plone 3.3.5Plone Plone 3.0.6Plone Plone 3.2Plone Plone 3.1.1Plone Plone 2.1.1Plone Plone 3.3.4Plone Plone 3.3.2Plone Plone 4.0.4Plone Plone 3.1.7Plone Plone 4.1Plone Plone 3.2.2Plone Plone 2.1.2Plone Plone 3.0.3
NA
CVE-2012-5496
kupu_spellcheck.py in Kupu in Plone prior to 4.0 allows remote malicious users to cause a denial of service (ZServer thread lock) via a crafted URL.
Plone PlonePlone Plone 3.3.4Plone Plone 3.3.3Plone Plone 3.3.2Plone Plone 3.1.1Plone Plone 3.1Plone Plone 3.0.6Plone Plone 3.0.5Plone Plone 3.0.4Plone Plone 2.1.2Plone Plone 2.1.1Plone Plone 2.1Plone Plone 3.3.1Plone Plone 3.2.3Plone Plone 3.1.4Plone Plone 3.1.2Plone Plone 3.0.2Plone Plone 3.0Plone Plone 2.5.1Plone Plone 2.1.4Plone Plone 2.0.3Plone Plone 2.0.1
NA
CVE-2013-4194
The WYSIWYG component (wysiwyg.py) in Plone 2.1 up to and including 4.1, 4.2.x up to and including 4.2.5, and 4.3.x up to and including 4.3.1 allows remote malicious users to obtain sensitive information via a crafted URL, which reveals the installation path in an error message.
Plone Plone 4.3Plone Plone 4.3.1Plone Plone 4.2Plone Plone 4.2.2Plone Plone 4.2.4Plone Plone 4.2.5Plone Plone 4.2.1Plone Plone 4.2.3Plone Plone 4.0.2Plone Plone 4.0.4Plone Plone 3.0.1Plone Plone 3.0.3Plone Plone 3.1.3Plone Plone 3.1.5.1Plone Plone 3.3Plone Plone 3.3.2Plone Plone 2.5.1Plone Plone 2.5.3Plone Plone 2.1.4Plone Plone 4.0.5Plone Plone 4.0.6.1Plone Plone 4.1
NA
CVE-2013-4195
Multiple open redirect vulnerabilities in (1) marmoset_patch.py, (2) publish.py, and (3) principiaredirect.py in Plone 2.1 up to and including 4.1, 4.2.x up to and including 4.2.5, and 4.3.x up to and including 4.3.1 allow remote malicious users to redirect users to arbitrary web...
Plone Plone 4.0Plone Plone 4.1Plone Plone 3.0.1Plone Plone 3.0.6Plone Plone 3.1.1Plone Plone 3.2Plone Plone 3.2.2Plone Plone 3.3.5Plone Plone 2.5.1Plone Plone 2.1Plone Plone 2.1.2Plone Plone 3.0.2Plone Plone 3.0.3Plone Plone 3.0.4Plone Plone 3.0.5Plone Plone 3.3Plone Plone 3.3.1Plone Plone 3.3.2Plone Plone 3.3.3Plone Plone 2.1.4Plone Plone 4.0.2Plone Plone 4.0.3
NA
CVE-2013-4188
traverser.py in Plone 2.1 up to and including 4.1, 4.2.x up to and including 4.2.5, and 4.3.x up to and including 4.3.1 allows remote attackers with administrator privileges to cause a denial of service (infinite loop and resource consumption) via unspecified vectors related to &...
Plone Plone 4.3.1Plone Plone 4.3Plone Plone 4.0.3Plone Plone 4.0.5Plone Plone 4.1Plone Plone 3.0.4Plone Plone 3.0.6Plone Plone 3.1.6Plone Plone 3.2Plone Plone 3.3.3Plone Plone 3.3.5Plone Plone 2.5.4Plone Plone 2.1Plone Plone 3.0Plone Plone 3.0.1Plone Plone 3.0.2Plone Plone 3.0.3Plone Plone 3.2.1Plone Plone 3.2.2Plone Plone 3.2.3Plone Plone 3.3Plone Plone 3.3.1
NA
CVE-2013-4189
Multiple unspecified vulnerabilities in (1) dataitems.py, (2) get.py, and (3) traverseName.py in Plone 2.1 up to and including 4.1, 4.2.x up to and including 4.2.5, and 4.3.x up to and including 4.3.1 allow remote authenticated users with administrator access to a subtree to acce...
Plone Plone 4.0.3Plone Plone 4.0.5Plone Plone 3.0.2Plone Plone 3.0.4Plone Plone 3.1.4Plone Plone 3.1.6Plone Plone 3.3.1Plone Plone 3.3.3Plone Plone 2.5.2Plone Plone 2.5.4Plone Plone 4.0.6.1Plone Plone 4.1Plone Plone 3.0Plone Plone 3.0.1Plone Plone 3.2Plone Plone 3.2.1Plone Plone 3.2.2Plone Plone 3.2.3Plone Plone 2.1Plone Plone 2.1.1Plone Plone 2.1.2Plone Plone 2.1.3
NA
CVE-2013-4190
Multiple cross-site scripting (XSS) vulnerabilities in (1) spamProtect.py, (2) pts.py, and (3) request.py in Plone 2.1 up to and including 4.1, 4.2.x up to and including 4.2.5, and 4.3.x up to and including 4.3.1 allow remote malicious users to inject arbitrary web script or HTML...
Plone Plone 4.2Plone Plone 4.2.5Plone Plone 4.2.1Plone Plone 4.2.2Plone Plone 4.2.3Plone Plone 4.2.4Plone Plone 4.3Plone Plone 4.3.1Plone Plone 4.0.4Plone Plone 4.0.6.1Plone Plone 3.0.5Plone Plone 3.1Plone Plone 3.1.5.1Plone Plone 3.1.7Plone Plone 3.3.2Plone Plone 3.3.4Plone Plone 2.5.5Plone Plone 2.1.1Plone Plone 3.0Plone Plone 3.0.1Plone Plone 3.0.2Plone Plone 3.0.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38002CVE-2006-4304CVE-2024-4336CVE-2024-33437CVE-2024-4340CVE-2024-27956privilegeinsecure direct object referenceXSSitem search icon">CVE-2024-25938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook