PT-2014-5550

Name of the Vulnerable Software and Affected Versions iMember360 plugin versions 3.8.012 through 3.9.001 Description The issue allows remote attackers to delete arbitrary users due to improper access restriction. This can be achieved by sending a request with a user name in the Email parameter an...