PT-2006-1028

Name of the Vulnerable Software and Affected Versions: Plone versions 2.0.5, 2.1.2, and 2.5-beta1 Description: The issue allows remote attackers to modify portraits due to a lack of access restriction to certain methods. Specifically, the methods changeMemberPortrait, deletePersonalPortrait, and...