Description

Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.

Remediation

References

CVE-2011-0720

Related Vulnerabilities

Oracle JRE CVE-2013-5824 Vulnerability (CVE-2013-5824)

MySQL CVE-2016-0596 Vulnerability (CVE-2016-0596)

WordPress Plugin Management App for WooCommerce-Order notifications, Order management, Lead management, Uptime Monitoring Unspecified Vulnerability (1.2.3)

WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Request Forgery (2.0.20)

ATutor Improper Privilege Management Vulnerability (CVE-2017-1000003)

Severity

High

Classification

CVE-2011-0720

Tags

Missing Update Known Vulnerabilities