info
discussion
exploit
solution
references
Drupal View User Profile Authorization Bypass Vulnerability
References:
[DSA 958-1] New drupal packages fix several vulnerabilities
(Debian)
DRUPAL-SA-2005-009: Bypass "view user profiles" permission
(Drupal)
Vendor Homepage
(Drupal)
Privacy Statement
Copyright 2010, SecurityFocus