CVE-2009-3122 Information

Share on:

Description

The Ajax Table module 5.x for Drupal does not perform access control which allows remote attackers to delete arbitrary users and nodes via unspecified vectors.

Reference

http://drupal.org/node/560298 http://secunia.com/advisories/36497 http://www.osvdb.org/57435 http://www.securityfocus.com/bid/36165 http://www.vupen.com/english/advisories/2009/2452 https://exchange.xforce.ibmcloud.com/vulnerabilities/52818