Plone 3.3.x < 4.3.10 / 5.0.x < 5.0.5 Multiple Vulnerabilities (HF 20160419)

The version of Plone installed on the remote host is 3.3.x prior to 4.3.10, 5.0.x prior to 5.0.5. It is, therefore, affected by the following vulnerabilities: - Plone does not have security declarations for Dexterity content-related WebDAV requests, which allows remote attackers to gain webdav...

Plone Security Bypass Vulnerability

Plone is the United States Plone Foundation's set of free and open source content management system CMS built on the application server Zope. A security vulnerability exists in Plone's five.pt file, which can be exploited by an attacker to bypass restricted Python with PloneFormGen template editi...