CVE-2008-0164

The CVE-2008-0164 entry concerns Plone CMS 3.0.5 and 3.0.6, describing two CSRF vulnerabilities: (1) remote attackers can add arbitrary accounts via the join_form page and (2) change group privileges via the prefs_groups_overview page. The NVD entry assigns a base score of 4.3 (Medium) with Netwo...