CVE-2007-4063 | BDVDB-2026-25557 Detail

Description#

Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.2 allow remote attackers to (1) delete comments, (2) delete content revisions, and (3) disable menu items as privileged users, related to improper use of HTTP GET and the Forms API.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.vupen.com/english/advisories/2007/2697
http://www.securityfocus.com/bid/25099
https://exchange.xforce.ibmcloud.com/vulnerabilities/35639
http://drupal.org/files/sa-2007-017/advisory.txt
http://secunia.com/advisories/26224
http://osvdb.org/37898

Exploit#

No public exploit known

History#

Version 12007-07-30Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.