index.php in MiniTwitter 0.2 beta allows remote authenticated users to modify certain options of arbitrary accounts via an opt action.Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/50283http://www.securityfocus.com/archive/1/503157/100/0/threadedhttp://www.securityfocus.com/bid/34795http://www.exploit-db.com/exploits/8587