CVE:CVE-2009-3782
CNNVD:CNNVD-200910-380
Drupal Userpoints 6.x-1.1版本之前的6.x版本中存在未明漏洞。具有"View own userpoints"许可的远程验证用户可以借助攻击向量，读取任意用户的用户点数据。
solution:Upgrade 2bits userpoints to a higher version than 6.x-1.0,6.x-1.x-dev,and avoid the version 6.x-1.0,6.x-1.x-dev