report.cgi in Google Urchin allows remote attackers to bypass authentication and obtain sensitive information (web server logs) via certain modified query parameters as demonstrated using the profile rid prefs n vid bd ed dt and gtype parameters a different vulnerability than CVE-2007-5112.