Description

ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes.

Remediation

References

CVE-2002-0688

Related Vulnerabilities

WordPress Plugin WordPress Contact Forms by Cimatti Cross-Site Scripting (1.4.11)

WordPress Plugin PowerPress Podcasting by Blubrry Cross-Site Scripting (6.0)

WordPress Plugin BookX Local File Inclusion (1.7)

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-34008)

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-31801)

Severity

High

Classification

CVE-2002-0688

Tags

Missing Update Known Vulnerabilities