CVE-2007-5594 | BDVDB-2026-27193 Detail

Description#

Drupal 5.x before 5.3 does not apply its Drupal Forms API protection against the user deletion form, which allows remote attackers to delete users via a cross-site request forgery (CSRF) attack.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://drupal.org/node/184348
https://exchange.xforce.ibmcloud.com/vulnerabilities/37268
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00328.html
http://secunia.com/advisories/27352
http://secunia.com/advisories/27290
http://www.securityfocus.com/bid/26119

Exploit#

No public exploit known

History#

Version 12007-10-19Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.