CVE

Id
93959  
CVE No.
CVE-2016-7139  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in an unspecified page template in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.  
Phase
Assigned (20160905)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
795027 93959 CVE-2016-7139 BUGTRAQ:20161012 Multiple Vulnerabilities in Plone CMS  View
795028 93959 CVE-2016-7139 URL:http://www.securityfocus.com/archive/1/archive/1/539572/100/0/threaded  View
795029 93959 CVE-2016-7139 FULLDISC:20161019 Multiple Vulnerabilities in Plone CMS  View
795030 93959 CVE-2016-7139 URL:http://seclists.org/fulldisclosure/2016/Oct/80  View
795031 93959 CVE-2016-7139 MLIST:[oss-security] 20160905 Re: CVE request: Plone multiple vulnerabilities  View
795032 93959 CVE-2016-7139 URL:http://www.openwall.com/lists/oss-security/2016/09/05/4  View
795033 93959 CVE-2016-7139 MLIST:[oss-security] 20160905 Re: CVE request: Plone multiple vulnerabilities  View
795034 93959 CVE-2016-7139 URL:http://www.openwall.com/lists/oss-security/2016/09/05/5  View
795035 93959 CVE-2016-7139 MISC:http://packetstormsecurity.com/files/139110/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html  View
795036 93959 CVE-2016-7139 CONFIRM:https://plone.org/security/hotfix/20160830/non-persistent-xss-in-plone  View
795037 93959 CVE-2016-7139 BID:92752  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4945 JVNDB-2016-005718 Exponent CMS の Pixidou Image Editor におけるサイト上の任意のフォルダにファイルをアップロードされる脆弱性 Exponent CMS の Pixidou Image Editor には、サイト上の任意のフォルダにファイルをアップロードされる脆弱性が存在します。 CVE-2016-7452 93959 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005718.html  View