Plone CMS Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2012-5485 - Vulnerability Database

Plone CMS Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2012-5485

Medium
Reference: CVE-2012-5485
Title: Plone CMS Improper Control of Generation of Code (Code Injection) Vulnerability
Overview:

registerConfiglet.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via unspecified vectors related to the admin interface.