Security Advisory
CVE-2015-7880
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The Entity Registration module 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to obtain sensitive event registration information by leveraging the "Register other accounts" permission and knowledge of usernames.