Description
membership_tool.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to enumerate user account names via a crafted URL.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Survey And Quiz Tool 'action' Parameter Cross-Site Scripting (1.2.1)
Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.51)
Dotclear Other Vulnerability (CVE-2014-3782)
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-55121)
Sqlite Improper Input Validation Vulnerability (CVE-2016-6153)