Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.10 and 6.x before 6.4 allow remote attackers to hijack the authentication of administrators for requests that (1) add or (2) delete user access rules.

Remediation

References

CVE-2008-3744

Related Vulnerabilities

Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-26266)

Oracle Database Server CVE-2008-0346 Vulnerability (CVE-2008-0346)

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-2373)

Drupal CVE-2009-3352 Vulnerability (CVE-2009-3352)

WordPress Plugin Auctions 'upload.php' Arbitrary File Upload (2.0.1.3)

Severity

Medium

Classification

CVE-2008-3744 CWE-352

Tags

Missing Update Known Vulnerabilities