Description
Unspecified vulnerability in Userpoints 6.x before 6.x-1.1, a module for Drupal, allows remote authenticated users with "View own userpoints" permissions to read the userpoint data of arbitrary users via unknown attack vectors.
References
- 37123 third-party-advisory
- userpoints-userpoint-information-disclosure(53896) vdb-entry
- 36786 vdb-entry
- http://drupal.org/node/610828
- 59124 vdb-entry
- ADV-2009-2998 vdb-entry
- http://drupal.org/node/610818