CVE-2005-3974
Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3, when running on PHP5, does not correctly enforce user privileges, which allows remote attackers to bypass the "access user pr…
Published: 2005-12-03 · CVSS: Unscored
Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3, when running on PHP5, does not correctly enforce user privileges, which allows remote attackers to bypass the "access user profiles" permission.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7