PT-2012-1336

Name of the Vulnerable Software and Affected Versions SilverStripe versions 2.3.x through 2.3.6 Description The issue allows remote attackers to hijack user accounts by saving data using the email address ID of another user. This is due to a problem in the Member ProfileForm in security/Member.ph...