Plone Security Bypass Vulnerability

Plone is the United States Plone Foundation's set of free and open source content management system CMS built on the application server Zope. A security vulnerability exists in Plone's five.pt file, which can be exploited by an attacker to bypass restricted Python with PloneFormGen template editi...

Plone CMS 'PloneFormGen' Add-On 1.7.4 - 1.7.8 Arbitrary Code Execution Vulnerability

The PloneFormGen add-on of Plone CMS is prone to an arbitrary code execution vulnerability. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...

Plone PloneFormGen Unspecified Arbitrary Code Execution

The version of PloneFormGen, an add-on for Plone, installed on the remote web server contains a flaw that allows arbitrary code execution. Using a specially crafted URL, this can allow an unauthenticated, remote attacker the ability to run arbitrary commands on the system subject to the privilege...