Description
Unspecified vulnerability in the Roles module in Xaraya 1.1.2 and earlier allows attackers to gain privileges via unspecified vectors, probably related to incorrect permission checking in xartemplates/user-view.xd.
References
- http://www.xaraya.com/index.php/news/772
- xaraya-roles-module-security-bypass(33844) vdb-entry
- ADV-2007-1522 vdb-entry
- 24959 third-party-advisory
- http://sourceforge.net/project/shownotes.php?release_id=503035
- 35304 vdb-entry
- 23631 vdb-entry