NVD

Id
50951  
Name
CVE-2009-3782  
Description
Unspecified vulnerability in Userpoints 6.x before 6.x-1.1, a module for Drupal, allows remote authenticated users with "View own userpoints" permissions to read the userpoint data of arbitrary users via unknown attack vectors.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-10-26  
Modified Date
2009-10-27  
Seq
2009-3782  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
258017 50951 CVE-2009-3782 http://drupal.org/node/610818  View
258018 50951 CVE-2009-3782 http://drupal.org/node/610828  View
258019 50951 CVE-2009-3782 36786  View
258020 50951 CVE-2009-3782 ADV-2009-2998  View
258021 50951 CVE-2009-3782 userpoints-userpoint-information-disclosure(53896)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42855 JVNDB-2009-003862 Drupal の Userpoints モジュールにおける任意のユーザのユーザポイントデータを読まれる脆弱性 Drupal の Userpoints モジュールには、任意のユーザのユーザポイントデータを読まれる脆弱性が存在します。 CVE-2009-3782 41213 CVE-2009-3782 50951 3.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003862.html 2009-10-21 2012-06-26 View