t0pP8uZz has reported a vulnerability in Prozilla Reviews, which can be exploited by malicious people to bypass certain security restrictions.

The vulnerability is caused due to insufficient access restrictions of the siteadmin/DeleteUser.php script. This can be exploited to delete arbitrary users by directly accessing the vulnerable script.

Solution
Restrict access to the affected script (e.g. with ".htaccess").

Provided and/or discovered by
t0pP8uZz

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://milw0rm.com/exploits/5387

Deep Links
Links available to Secunia VIM customers