2008-12-18 21:00:00
mitre
PUBLISHED
PHParanoid before 0.4 does not properly restrict access to the members area by unauthenticated users, which has unknown impact and remote attack vectors.