CVE-2009-4515

Metadata

CVE-2009-4515
5.0
drupal.org, drupal.org, securityfocus.com, vupen.com
2009-12-31
2017-06-06 20:22

Description

The Storm module 6.x before 6.x-1.25 for Drupal does not enforce privilege requirements for storminvoiceitem nodes, which allows remote attackers to read node titles via unspecified vectors.

Related Vulnerabilities