Approved changes feed: RSS · Atom
cpe:2.3:a:plone:plone:2.5_beta1:*:*:*:*:*:*:*
part: a version: 2.5_beta1 update: *
| Vendor | Plone (20065100-5fec-5b5e-bb46-a6d4673848e0) |
|---|---|
| Product | Plone (6110f612-67ec-5a9f-99a2-abd1946de8b4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/plone/plone |
purl2cpe | 2026-06-01 10:16:04.157364 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-4571 |
vulnerable | 2026-06-03 14:28:58.660101 |
Details available
Cross-site scripting (XSS) vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG tag.
Published: 2008-10-15T18:12:00.000Z
Updated: 2024-08-07T10:24:19.347Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5741 |
vulnerable | 2026-06-03 14:28:27.744072 |
Details available
Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.
Published: 2007-11-07T21:00:00.000Z
Updated: 2024-08-07T15:39:13.671Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1711 |
vulnerable | 2026-06-03 14:27:25.047360 |
Details available
Plone 2.0.5, 2.1.2, and 2.5-beta1 does not restrict access to the (1) changeMemberPortrait, (2) deletePersonalPortrait, and (3) testCurrentPassword methods, which allows remote attackers to modify portraits.
Published: 2006-04-11T18:00:00.000Z
Updated: 2024-08-07T17:19:49.405Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.