CVE-2013-7063 | Vulnerability Database | Aqua Security

The Invitation module 7.x-2.x for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information via unspecified default views.

Affected Software

Name	Vendor	Start Version	End Version
Invitation	Invitation_project	7.x-2.0 (including)	7.x-2.0 (including)
Invitation	Invitation_project	7.x-2.1 (including)	7.x-2.1 (including)
Drupal6	Ubuntu	lucid	*
Drupal6	Ubuntu	precise	*
Drupal6	Ubuntu	quantal	*
Drupal6	Ubuntu	raring	*
Drupal7	Ubuntu	precise	*
Drupal7	Ubuntu	quantal	*
Drupal7	Ubuntu	raring	*
Drupal7	Ubuntu	saucy	*
Drupal7	Ubuntu	utopic	*
Drupal7	Ubuntu	vivid	*
Drupal7	Ubuntu	wily	*
Drupal7	Ubuntu	yakkety	*

References

http://www.openwall.com/lists/oss-security/2013/12/06/7
http://www.openwall.com/lists/oss-security/2013/12/12/1
https://drupal.org/node/2140097
http://www.openwall.com/lists/oss-security/2013/12/06/7
http://www.openwall.com/lists/oss-security/2013/12/12/1
https://drupal.org/node/2140097

NVD	https://nvd.nist.gov/vuln/detail/CVE-2013-7063
CWE	https://cwe.mitre.org/data/definitions/264.html