A confirmed security vulnerability has been identified with 30 high traffic web sites owned by QuinStreet. The vendor stores database IDs in cookies which are easily spoofed (USERID_COOKIE), allowing all user information to be accessed.
12c6c5deb30c5b87678c3f751877699e042013d41da09a3c32d7c0543db5a1a8