Description
Semantically-Interconnected Online Communities (SIOC) 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, does not properly implement menu and database APIs, which allows remote attackers to obtain usernames and read hashed emails and comments via unspecified vectors.
References
- 32191 third-party-advisory
- http://drupal.org/node/318749
- 31658 vdb-entry
- sioc-unspecified-security-bypass(45762) vdb-entry