system
Describe <CVE-2009-3782>.
user
What is <CVE-2009-3782>?
assistant
Unspecified vulnerability in Userpoints 6.x before 6.x-1.1, a module for Drupal, allows remote authenticated users with "View own userpoints" permissions to read the userpoint data of arbitrary users via unknown attack vectors..