CVE-2012-1650

The CVE-2012-1650 entry concerns the Drupal ZipCart module (6.x) prior to 6.x-1.4. The vulnerability arises because archive creation checks the wrong permission: it uses the generic “access content” permission instead of “access ZipCart downloads,” allowing remote authenticated users who have acc...