Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.2 allow remote attackers to (1) delete comments, (2) delete content revisions, and (3) disable menu items as privileged users, related to improper use of HTTP GET and the Forms API.

Remediation

References

CVE-2007-4063

Related Vulnerabilities

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-21724)

Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-44945)

osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-27148)

WordPress Plugin Easy2Map Multiple Vulnerabilities (1.2.9)

WordPress Plugin Ajax Contact Form Cross-Site Scripting (1.0)

Severity

Medium

Classification

CVE-2007-4063

Tags

Missing Update Known Vulnerabilities