[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96174

 
 

909

 
 

78077

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2012-1636

Date: (C)2012-10-01   (M)2015-12-16
 
CVSS Score: 4.3Access Vector: NETWORK
Exploitability Subscore: 8.6Access Complexity: MEDIUM
Impact Subscore: 2.9Authentication: NONE
 Confidentiality: NONE
 Integrity: PARTIAL
 Availability: NONE











Cross-site request forgery (CSRF) vulnerability in the stickynote module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of users for requests that delete stickynotes via unspecified vectors.

Reference:
SECUNIA-47650
http://www.openwall.com/lists/oss-security/2012/04/07/1
http://drupal.org/node/1408556
http://drupal.org/node/1409422
http://drupalcode.org/project/stickynote.git/commit/9a7b535

CPE    2
cpe:/a:luke_herrington:stickynote:7.x-1.x:dev
cpe:/a:luke_herrington:stickynote:7.x-1.0
CWE    1
CWE-352

© 2013 SecPod Technologies