Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
plone plone 2.5 beta1 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2006-1711
Plone 2.0.5, 2.1.2, and 2.5-beta1 does not restrict access to the (1) changeMemberPortrait, (2) deletePersonalPortrait, and (3) testCurrentPassword methods, which allows remote malicious users to modify portraits.
Plone Plone 2.5 Beta1
Plone Plone 2.1.2
Plone Plone 2.0.5
1 EDB exploit
NA
CVE-2007-5741
Plone 2.5 up to and including 2.5.4 and 3.0 up to and including 3.0.2 allows remote malicious users to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.
Plone Plone 2.5 Beta1
Plone Plone 3.0.1
Plone Plone 3.0
Plone Plone 2.5.4
Plone Plone 2.5.1
Plone Plone 2.5
Plone Plone 2.5.1 Rc
Plone Plone 3.0.2
NA
CVE-2008-4571
Cross-site scripting (XSS) vulnerability in the LiveSearch module in Plone prior to 3.0.4 allows remote malicious users to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG tag.
Plone Plone 2.5 Beta1
Plone Plone 3.0.1
Plone Plone 3.0
Plone Plone 2.5.4
Plone Plone 2.5.1
Plone Plone 2.1.2
Plone Plone 2.0.5
Plone Plone 2.5
Plone Plone
Plone Plone 2.5.1 Rc
Plone Plone 3.0.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusion
IMAP
CVE-2024-36103
CVE-2024-28995
CVE-2024-37325
CVE-2024-30078
CVE-2024-30082
SQL injection
CVE-2024-30052
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started