Description

Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects.

Remediation

References

CVE-2000-1212

Related Vulnerabilities

WordPress Plugin Contact Form, Survey & Popup Form for WordPress-ARForms Form Builder Cross-Site Scripting (1.4)

WordPress Plugin Youzify-BuddyPress Community, User Profile, Social Network & Membership for WordPress SQL Injection (1.2.5)

Artifactory CVE-2019-9733 Vulnerability (CVE-2019-9733)

WordPress Plugin AdRotate-Ad manager & AdSense Ads SQL Injection (3.9.4)

PHP Other Vulnerability (CVE-2011-3182)

Severity

Medium

Classification

CVE-2000-1212

Tags

Missing Update Known Vulnerabilities