CVE-2008-4792

The core BlogAPI module in Drupal 5.x before 5.11 and 6.x before 6.5 does not properly validate unspecified content fields of an internal Drupal form, which allows remote authenticated users to bypass intended access restrictions via modified field values...

CVE-2008-4792

The CVE-2008-4792 issue affects Drupal 5.x before 5.11 and 6.x before 6.5, where the core BlogAPI module fails to validate unspecified content fields in an internal form. This allows remote authenticated users to bypass access restrictions by altering field values. The vulnerability is described ...