707 matches found
CVE-2007-0240
Cross-site scripting XSS vulnerability in Zope 2.10.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a HTTP GET request...
Cross site scripting
Cross-site scripting XSS vulnerability in Zope 2.10.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a HTTP GET request...
CVE-2007-0240
The CVE-2007-0240 entry describes a cross-site scripting (XSS) vulnerability in Zope 2.10.2 and earlier, exploitable via unspecified vectors in HTTP GET requests, allowing an attacker to inject arbitrary web script/HTML that runs in the victim’s browser. The OpenVAS/Debian/SUSE/Nessus advisories ...
CVE-2007-0240
Cross-site scripting XSS vulnerability in Zope 2.10.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a HTTP GET request...
zope -- cross-site scripting vulnerability
The Zope Team reports: A vulnerability has been discovered in Zope, where by certain types of misuse of HTTP GET, an attacker could gain elevated privileges. All Zope versions up to and including 2.10.2 are affected...
Debian DSA-910-1 : zope.2.7 - design error
A vulnerability has been discovered in zope 2.7, an Open Source web application server, that allows remote attackers to insert arbitrary files via include directives in reStructuredText functionality. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
Debian DSA-1032-1 : zope-cmfplone - programming error
It was discovered that the Plone content management system lacks security declarations for three internal classes. This allows manipulation of user portraits by unprivileged users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
FreeBSD : zope -- restructuredText 'csv_table' Information Disclosure (65a8f773-4a37-11db-a4cc-000a48049292)
Secunia reports : A vulnerability has been reported in Zope, which can be exploited by malicious people to disclose potentially sensitive information. The vulnerability is caused due to an error in the use of the docutils module to parse and render 'restructured' text. This can be exploited to...
PYSEC-2006-8
The docutils module in Zope Zope2 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText reST markup, which allows remote attackers to read arbitrary files via a csvtable directive, a different vulnerability than CVE-2006-3458...
CVE-2006-4684
The docutils module in Zope Zope2 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText reST markup, which allows remote attackers to read arbitrary files via a csvtable directive, a different vulnerability than CVE-2006-3458...
PYSEC-2006-8
The docutils module in Zope Zope2 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText reST markup, which allows remote attackers to read arbitrary files via a csvtable directive, a different vulnerability than CVE-2006-3458...
CVE-2006-4684
CVE-2006-4684 details (Zope/Zope2, docutils integration): Affects Zope 2.7.0–2.7.9 and 2.8.0–2.8.8. The vulnerability stems from improper handling of reStructuredText (reST) in web pages, allowing a remote attacker to read arbitrary files via a csv_table directive. CVSSv2 base metrics reported: A...
CVE-2006-4684
The docutils module in Zope Zope2 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText reST markup, which allows remote attackers to read arbitrary files via a csvtable directive, a different vulnerability than CVE-2006-3458...
[SECURITY] [DSA 1176-1] New zope2.7 packages fix information disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1176-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 13th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1176-1] New zope2.7 packages fix information disclosure
-------------------------------------------------------------------------- Debian Security Advisory DSA 1176-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 13th, 2006 http://www.debian.org/security/faq -...
DSA-1176-1 zope2.7
Bulletin has no description...
zope -- restructuredText "csv_table" Information Disclosure
Secunia reports: A vulnerability has been reported in Zope, which can be exploited by malicious people to disclose potentially sensitive information. The vulnerability is caused due to an error in the use of the docutils module to parse and render "restructured" text. This can be exploited to...
security flaw
Cross-site scripting XSS vulnerability in Zope 2.10.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a HTTP GET request...
[SECURITY] [DSA 1113-1] New zope2.7 packages fix information disclosure
-------------------------------------------------------------------------- Debian Security Advisory DSA 1113-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 18th, 2006 http://www.debian.org/security/faq -...