Vulners
Lucene search
3 matches found
GHSA-683W-84M7-P8PW Plone User account enumeration via crafted URL
membershiptool.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to enumerate user account names via a crafted URL...
6.9CVSS5.9AI score0.02118EPSS
Exploits0References15
CVE-2012-5497
membershiptool.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to enumerate user account names via a crafted URL...
5CVSS6.2AI score0.02118EPSS
Exploits0References5
PYSEC-2014-39
membershiptool.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to enumerate user account names via a crafted URL...
5CVSS5.7AI score0.02118EPSS
Exploits0References6
20