Description

Cross-site request forgery (CSRF) vulnerability in Drupal 5.x before 5.8 and 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of "translated strings."

Remediation

References

CVE-2008-3220

Related Vulnerabilities

WordPress Plugin Ajax Search Lite Security Bypass (3.1)

Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-10353)

WordPress Plugin Popup Builder-Create highly converting, mobile friendly marketing popups Security Bypass (4.3.0)

phpMyAdmin Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-3456)

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-31800)

Severity

Medium

Classification

CVE-2008-3220 CWE-352

Tags

Missing Update Known Vulnerabilities