Information Disclosure

pageflow is vulnerable to information disclosure.The vulnerability exists in multiple functions in entry.rb and usermixin.rb because the lack of restrictions to database objects which allows an attacker to gain access to the data of associated database objects...