Description
The Slidebox module before 7.x-1.4 for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information via unspecified vectors.
References
- 48360 third-party-advisory
- 52500 vdb-entry
- slidebox-nodes-security-bypass(74067) vdb-entry
- http://drupal.org/node/1482166
- [oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments) mailing-list
- http://drupalcode.org/project/slidebox.git/commit/3dae144
- http://drupal.org/node/1482342