1 results (0.009 seconds)

CVSS: 6.8EPSS: 0%CPEs: 4EXPL: 0

Multiple cross-site request forgery (CSRF) vulnerabilities in Comment Mail 5.x before 5.x-1.1, a module for Drupal, allow remote attackers to hijack the authentication of administrators. Múltiples vulnerabilidades de tipo cross-site request forgery (CSRF) en Comment Mail versiones 5.x anterior a 5.x-1.1, un módulo para Drupal, permite a los atacantes remotos secuestrar la autenticación de los administradores. • http://drupal.org/node/339495 http://osvdb.org/50206 http://secunia.com/advisories/32905 https://exchange.xforce.ibmcloud.com/vulnerabilities/46944 • CWE-352: Cross-Site Request Forgery (CSRF) •