Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.10 and 6.x before 6.4 allow remote attackers to hijack the authentication of administrators for requests that (1) add or (2) delete user access rules.

Remediation

References

CVE-2008-3744

Related Vulnerabilities

Plone CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2012-5495)

Oracle Database Server Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-5508)

WordPress Plugin Event Single Page Templates Addon For The Events Calendar Security Bypass (1.5)

WordPress 3.8.x Prototype Pollution (3.8 - 3.8.37)

MediaWiki Improper Input Validation Vulnerability (CVE-2017-0368)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-352 CVE-2008-3744