Plone CMS Other Vulnerability - CVE-2006-1711 - Vulnerability Database

Plone CMS Other Vulnerability - CVE-2006-1711

Medium

Reference: CVE-2006-1711

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2006-1711

Title: Plone CMS Other Vulnerability

Overview:

Plone 2.0.5 2.1.2 and 2.5-beta1 does not restrict access to the (1) changeMemberPortrait (2) deletePersonalPortrait and (3) testCurrentPassword methods which allows remote attackers to modify portraits.