CVE

Id
93960  
CVE No.
CVE-2016-7140  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the ZMI page in Zope2 in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.  
Phase
Assigned (20160905)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
795038 93960 CVE-2016-7140 BUGTRAQ:20161012 Multiple Vulnerabilities in Plone CMS  View
795039 93960 CVE-2016-7140 URL:http://www.securityfocus.com/archive/1/archive/1/539572/100/0/threaded  View
795040 93960 CVE-2016-7140 FULLDISC:20161019 Multiple Vulnerabilities in Plone CMS  View
795041 93960 CVE-2016-7140 URL:http://seclists.org/fulldisclosure/2016/Oct/80  View
795042 93960 CVE-2016-7140 MLIST:[oss-security] 20160905 Re: CVE request: Plone multiple vulnerabilities  View
795043 93960 CVE-2016-7140 URL:http://www.openwall.com/lists/oss-security/2016/09/05/4  View
795044 93960 CVE-2016-7140 MLIST:[oss-security] 20160905 Re: CVE request: Plone multiple vulnerabilities  View
795045 93960 CVE-2016-7140 URL:http://www.openwall.com/lists/oss-security/2016/09/05/5  View
795046 93960 CVE-2016-7140 MISC:http://packetstormsecurity.com/files/139110/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html  View
795047 93960 CVE-2016-7140 CONFIRM:https://plone.org/security/hotfix/20160830/non-persistent-xss-in-zope2  View
795048 93960 CVE-2016-7140 BID:92752  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4946 JVNDB-2016-005719 Exponent CMS の Pixidou Image Editor における SQL インジェクションの脆弱性 Exponent CMS の Pixidou Image Editor には、SQL インジェクションの脆弱性が存在します。 CVE-2016-7453 93960 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005719.html  View