Unscored severity · published Oct 26, 2009
CVE-2009-3782
Unspecified vulnerability in Userpoints 6.x before 6.x-1.1, a module for Drupal, allows remote authenticated users with "View own userpoints" permissions to read the userpoint…
–
CVSS
1%
EPSS
No
On KEV
Description
Unspecified vulnerability in Userpoints 6.x before 6.x-1.1, a module for Drupal, allows remote authenticated users with "View own userpoints" permissions to read the userpoint data of arbitrary users via unknown attack vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
US
Userpoints · 2bits
6.x-1.0; 6.x-1.x-dev · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-3782
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-3782
Patch
http://drupal.org/node/610818
Patch
http://drupal.org/node/610828
osvdb.org
http://osvdb.org/59124
Vendor Advisory
http://secunia.com/advisories/37123
Patch
http://www.securityfocus.com/bid/36786
Patch
http://www.vupen.com/english/advisories/2009/2998