A vulnerability has been reported in various modules for Drupal, which can be exploited by malicious people to bypass certain security restrictions or disclose sensitive information.

The vulnerability is caused due to improper access restriction. This can potentially be exploited to display unspecified data or to access administrative functions without valid user credentials.

The vulnerability is reported in the following modules:

* Live prior to version 6.x-1.0
* AJAX Picture Preview prior to version 6.x-1.2
* Banner Rotor prior to version 6.x-1.3
* Creative Commons Lite prior to version 6.x-1.1
* Keyboard shortcut utiilty prior to version 6.x-1.1
* LiveJournal CrossPoster prior to version 6.x-1.4
* Taxonomy import/export via XML prior to version 6.x-1.2

Solution
Update to:
Further details available to Secunia VIM customers

Provided and/or discovered by
John Morahan and Peter Wolanin, Drupal security team

Changelog
Further details available to Secunia VIM customers

Original Advisory
DRUPAL-SA-2008-063:
http://drupal.org/node/319208

Deep Links
Links available to Secunia VIM customers