Posted by jbrauer on August 11, 2010 at 10:01pm
| Download | Size | md5 hash |
|---|---|---|
| prepopulate-5.x-1.5.tar.gz | 9.3 KB | bc1a06bb50ecd96ccce7efa968fd6f2f |
| prepopulate-5.x-1.5.zip | 11.24 KB | 5c943c46c98086a0481c5e7f25ccd6ee |
Last updated: December 24, 2010 - 23:40
SA-CONTRIB-2010-086 - Prepopulate - Access Bypass
The Prepopulate module provides the ability for form fields to be pre-populated via the request sent for the form.
The module is vulnerable to access bypass which would allow a malicious user to change the value of fields they would not otherwise have access to alter.
See http://drupal.org/node/880696 for more information.