Description

registerConfiglet.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via unspecified vectors, related to the admin interface.

Remediation

References

CVE-2012-5485

Related Vulnerabilities

WordPress Plugin WP Mail Logging Security Bypass (1.9.9)

WordPress Plugin Testimonial Multiple Vulnerabilities (2.2)

WordPress Plugin YT-Audio:Audio Hosting From YouTube in WordPress 'v' Parameter Cross-Site Scripting (1.7)

Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3530)

osCommerce Other Vulnerability (CVE-2004-2638)

Severity

Medium

Classification

CVE-2012-5485 CWE-94

Tags

Missing Update Known Vulnerabilities