Description

Cross-site request forgery (CSRF) vulnerability in Drupal 5.x before 5.8 and 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of "translated strings."

Remediation

References

CVE-2008-3220

Related Vulnerabilities

WordPress Plugin Yoast SEO Cross-Site Scripting (22.6)

WordPress Plugin Management App for WooCommerce-Order notifications, Order management, Lead management, Uptime Monitoring Arbitrary File Upload (1.2.2)

Zope Web Application Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-32633)

PHP Other Vulnerability (CVE-2007-1883)

PHP Numeric Errors Vulnerability (CVE-2014-2020)

Severity

Medium

Classification

CVE-2008-3220 CWE-352

Tags

Missing Update Known Vulnerabilities