Description
The Ajax Table module 5.x for Drupal does not perform access control, which allows remote attackers to delete arbitrary users and nodes via unspecified vectors.
References
- 36165 vdb-entry
- 57435 vdb-entry
- ajaxtable-unspecified-security-bypass(52818) vdb-entry
- 36497 third-party-advisory
- http://drupal.org/node/560298
- ADV-2009-2452 vdb-entry