Skip to content
OpenAdvisories

Archive

April 2006

Vulnerabilities first published in this month (UTC), newest first.

1 result · Clear filters · Feed

  • Medium —
    CVE-2006-1711 Public exploit

    Plone allows remote users to modify arbitrary portraits

    Plone 2.0.5, 2.1.2, and 2.5-beta1 does not restrict access to the (1) changeMemberPortrait, (2) deletePersonalPortrait, and (3) testCurrentPassword methods, which allows remote attackers to modify portraits.