Drupal FileField Sources third party module versions 6.x and 7.x suffer from an access bypass vulnerability.