CVE:CVE-2007-1360
CNNVD:CNNVD-200703-266
Drupal Nodefamily模块5.x-1.0之前的5.x版本中存在未明漏洞。远程认证用户可以借助未明的URL参数，访问和修改其他用户的资料。
solution:Upgrade drupal nodefamily to a higher version than 5.1_1.0,and avoid the version 5.1_1.0