Lucene search
PRIOn knowledge basePRION:CVE-2011-4030HistoryOct 10, 2011 - 10:55 a.m.
Design/Logic Flaw
2011-10-1010:55:00
PRIOn knowledge base
www.prio-n.com
7
The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than CVE-2011-3587.
Related
cve
cve
CVE-2011-4030
2011-10-10 10:55:06
CVE-2011-3587
2011-10-10 10:55:06
github
github
Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable
2022-05-17 05:37:14
Zope Command Execution Vulnerability
2022-05-17 05:37:39
nvd
nvd
CVE-2011-4030
2011-10-10 10:55:06
CVE-2011-3587
2011-10-10 10:55:06
cvelist
cvelist
CVE-2011-4030
2011-10-10 10:00:00
CVE-2011-3587
2011-10-10 10:00:00
saint
saint
Plone Zope SAXutils Command Execution
2012-01-13 00:00:00
Plone Zope SAXutils Command Execution
2012-01-13 00:00:00
Plone Zope SAXutils Command Execution
2012-01-13 00:00:00
seebug
seebug
Plone and Zope Remote Command Execution PoC
2014-07-01 00:00:00
Zopeζ‘ζΆ"cmd"εζ°θΏη¨ε½δ»€ζ§θ‘ζΌζ΄
2011-12-26 00:00:00
prion
prion
Design/Logic Flaw
2011-10-10 10:55:00
packetstorm
packetstorm
Plone and Zope Remote CMD Injection Exploit
2011-12-28 00:00:00
Plone / Zope Remote Command Execution
2011-12-21 00:00:00
exploitpack
exploitpack
Plone and Zope - Remote Command Execution
2011-12-21 00:00:00
canvas
canvas
Immunity Canvas: PLONE
2011-10-10 10:55:00
d2
d2
DSquare Exploit Pack: D2SEC_ZOPEPLONE
2011-10-10 10:55:00
checkpoint_advisories
checkpoint_advisories
Plone and Zope cmd Parameter Remote Command Execution (CVE-2011-3587)
2014-11-02 00:00:00
nessus
nessus
Plone Request Parsing Remote Command Execution
2011-12-20 00:00:00
dsquare
dsquare
Plone RCE
2012-01-26 00:00:00
osv
osv
Zope Command Execution Vulnerability
2022-05-17 05:37:39
exploitdb
exploitdb
Plone and Zope - Remote Command Execution
2011-12-21 00:00:00