CVE-2013-5937

CVE-2013-5937

EPSS 0.6%

Cross-site request forgery (CSRF) vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete database information via vectors involving the Drupal Form API.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://osvdb.org/97203 https://drupal.org/node/2087055 http://seclists.org/fulldisclosure/2013/Sep/64 https://exchange.xforce.ibmcloud.com/vulnerabilities/87052 http://www.openwall.com/lists/oss-security/2013/10/21/5