Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.10 and 6.x before 6.4 allow remote attackers to hijack the authentication of administrators for requests that (1) add or (2) delete user access rules.
Remediation
References
Related Vulnerabilities
OpenSSL Other Vulnerability (CVE-2010-4180)
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3365)
MySQL CVE-2019-2513 Vulnerability (CVE-2019-2513)
Drupal Improper Access Control Vulnerability (CVE-2015-2559)
WordPress Plugin Funky Penguin WP-PHPList 'unsubscribeemail' Parameter Cross-Site Scripting (2.10.2)