Secunia
Login
|
|
CVE Reference: CVE-2006-1711 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2006-1711 |
|
|
Description: Plone 2.0.5, 2.1.2, and 2.5-beta1 does not restrict access to the (1) changeMemberPortrait, (2) deletePersonalPortrait, and (3) testCurrentPassword methods, which allows remote attackers to modify portraits. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/25781 SAID Secunia Advisory: SA19633 Secunia Advisory: SA19640 MISC http://dev.plone.org/plone/ticket/5432 DEBIAN http://www.debian.org/security/2006/dsa-1032 CONFIRM BID 17484 |
|
| Return to the previous page. |
