CVE

Id
41217  
CVE No.
CVE-2009-3782  
Status
Candidate  
Description
Unspecified vulnerability in Userpoints 6.x before 6.x-1.1, a module for Drupal, allows remote authenticated users with "View own userpoints" permissions to read the userpoint data of arbitrary users via unknown attack vectors.  
Phase
Assigned (20091026)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
452160 41217 CVE-2009-3782 CONFIRM:http://drupal.org/node/610818  View
452161 41217 CVE-2009-3782 CONFIRM:http://drupal.org/node/610828  View
452162 41217 CVE-2009-3782 BID:36786  View
452163 41217 CVE-2009-3782 URL:http://www.securityfocus.com/bid/36786  View
452164 41217 CVE-2009-3782 OSVDB:59124  View
452165 41217 CVE-2009-3782 URL:http://osvdb.org/59124  View
452166 41217 CVE-2009-3782 SECUNIA:37123  View
452167 41217 CVE-2009-3782 URL:http://secunia.com/advisories/37123  View
452168 41217 CVE-2009-3782 VUPEN:ADV-2009-2998  View
452169 41217 CVE-2009-3782 URL:http://www.vupen.com/english/advisories/2009/2998  View
452170 41217 CVE-2009-3782 XF:userpoints-userpoint-information-disclosure(53896)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44071 JVNDB-2009-005078 Drupal 用のモジュールである OG Vocabulary におけるクロスサイトスクリプティングの脆弱性 Drupal 用のモジュールである Organic Groups (OG) Vocabulary には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-3786 41217 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005078.html  View