Downloads
Download tar.gz
9.3 KB
MD5: bc1a06bb50ecd96ccce7efa968fd6f2f
SHA-1: c22ab5787cc8dc3d570541f374de0fab7a442b35
SHA-256: 11d2edf1f420f934d97161b114c622edeaa800d31e2c66abddc306368f4333c9
Download zip
11.24 KB
MD5: 5c943c46c98086a0481c5e7f25ccd6ee
SHA-1: 7f921a783749b5f3457d08ad4e3fd967b1e02c4c
SHA-256: 5098bce2a836962a26beae9de08d45d4da509aecd041cc9bc56587a71464f553
Release notes
SA-CONTRIB-2010-086 - Prepopulate - Access Bypass
The Prepopulate module provides the ability for form fields to be pre-populated via the request sent for the form.
The module is vulnerable to access bypass which would allow a malicious user to change the value of fields they would not otherwise have access to alter.
See http://drupal.org/node/880696 for more information.