Description

python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to createObject.

Remediation

References

CVE-2012-5488

Related Vulnerabilities

Jenkins Other Vulnerability (CVE-2020-2100)

WordPress Plugin BackWPup 'wp_export_generate.php' Local and Remote File Include Vulnerabilities (2.1.4)

WordPress Plugin bbPress Cross-Site Scripting (2.5.6)

Jboss EAP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-0248)

WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Security Bypass (3.1.0)

Severity

Medium

Classification

CVE-2012-5488 CWE-94

Tags

Missing Update Known Vulnerabilities