Description
Unspecified vulnerability in the Nodefamily module for Drupal 5.x before 5.x-1.0 allows remote authenticated users to access and modify other users' profiles via unspecified URL parameters.
References
- ADV-2007-0855 vdb-entry
- 22853 vdb-entry
- nodefamily-url-security-bypass(32873) vdb-entry
- http://drupal.org/node/125324
- 24372 third-party-advisory
- 33911 vdb-entry