Secunia Security Advisory – Some vulnerabilities have been reported in the Project issue tracking module for Drupal, which can be exploited by malicious users to bypass certain security restrictions, disclose sensitive information, manipulate data, compromise vulnerable systems or conduct script insertion attacks.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/53933/sa23887.txt
Source: https://packetstormsecurity.com/files/53933/Secunia-Security-Advisory-23887.html