[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

95906

 
 

909

 
 

77986

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2008-0272

Date: (C)2008-01-15   (M)2017-08-08
 
CVSS Score: 4.3Access Vector: NETWORK
Exploitability Subscore: 8.6Access Complexity: MEDIUM
Impact Subscore: 2.9Authentication: NONE
 Confidentiality: NONE
 Integrity: PARTIAL
 Availability: NONE











Cross-site request forgery (CSRF) vulnerability in the aggregator module in Drupal 4.7.x before 4.7.11 and 5.x before 5.6 allows remote attackers to delete items from a feed as privileged users.

Reference:
BID-27238
SECUNIA-28422
SECUNIA-28486
ADV-2008-0127
ADV-2008-0134
drupal-aggregator-csrf(39617)
http://drupal.org/node/208562
http://www.vbdrupal.org/forum/showthread.php?p=6878
http://www.vbdrupal.org/forum/showthread.php?t=1349

CPE    5
cpe:/a:drupal:drupal:5.0
cpe:/a:drupal:drupal:5.1
cpe:/a:drupal:drupal:5.4
cpe:/a:drupal:drupal:5.3
...
CWE    1
CWE-352

© 2013 SecPod Technologies