prepopulate 6.x-2.0

Advisory ID: DRUPAL-SA-CONTRIB-2010-086 - PREPOPULATE ACCESS BYPASS

The Prepopulate module provides the ability for form fields to be pre-populated via the request sent for the form.

The module is vulnerable to access bypass which would allow a malicious user to change the value of fields they would not otherwise have access to alter.

For more information see the Security Advisory at http://drupal.org/node/880696