CVE-2009-3122

The Ajax Table module 5.x for Drupal does not perform access control, which allows remote attackers to delete arbitrary users and nodes via unspecified vectors.

Date published : 2009-09-09

http://www.securityfocus.com/bid/36165

http://drupal.org/node/560298