Description

Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.

Remediation

References

CVE-2011-0720

Related Vulnerabilities

Moodle Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-25978)

WordPress Plugin Eu Cookie Notice Cross-Site Request Forgery (1.0.6)

WordPress Plugin WordPress fancyBox Lightbox Cross-Site Scripting (1.0.1)

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0462)

WebLogic Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-7103)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2011-0720