Description
The Registration Codes module before 6.x-2.4 for Drupal does not restrict access to the registration code list, which might allow remote attackers to bypass intended registration restrictions.
References
- http://drupal.org/node/1394172
- 47443 third-party-advisory
- [oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments) mailing-list
- 51271 vdb-entry
- 78184 vdb-entry