Description

Cross-site request forgery (CSRF) vulnerability in Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allows remote attackers to perform unauthorized actions as an arbitrary user via unspecified vectors.

Remediation

References

CVE-2006-5476

Related Vulnerabilities

WordPress Plugin Captchinoo, Google recaptcha for admin login page Security Bypass (2.3)

WordPress Plugin Import all XML, CSV & TXT into WordPress Cross-Site Scripting (3.8.7)

WordPress Plugin Katalyst TimThumb 'timthumb.php' Arbitrary File Upload (1.0)

TCExam Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-5744)

Oracle Database Server CVE-2019-2734 Vulnerability (CVE-2019-2734)

Severity

High

Classification

CVE-2006-5476

Tags

Missing Update Known Vulnerabilities