Description

Cross-site request forgery (CSRF) vulnerability in Drupal 5.x before 5.8 and 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of "translated strings."

Remediation

References

CVE-2008-3220

Related Vulnerabilities

Liferay Portal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-33945)

Apache HTTP Server Use After Free Vulnerability (CVE-2019-0196)

Oracle Database Server CVE-2019-2913 Vulnerability (CVE-2019-2913)

WordPress Plugin Yasr-Yet Another Stars Rating SQL Injection (0.9.0)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-1830)

Severity

Medium

Classification

CVE-2008-3220 CWE-352

Tags

Missing Update Known Vulnerabilities