Secunia Security Advisory – A security issue has been reported in the Privatemsg module for Drupal, which can be exploited by malicious users to bypass certain security restrictions.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/89051/sa39565.txt
Source: https://packetstormsecurity.com/files/89051/Secunia-Security-Advisory-39565.html