Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Zope RestructuredText File Include Vulnerability

Zope is prone to a file-include vulnerability in the docutils module because Zope honors file-inclusion directives in RestructuredText objects by default.

An attacker can exploit this vulnerability to include and execute arbitrary Zope code in the security context of the Zope server.







 

Privacy Statement
Copyright 2009, SecurityFocus