Description

Cross-site request forgery (CSRF) vulnerability in Drupal 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of OpenID identities.

Remediation

References

CVE-2008-3221

Related Vulnerabilities

Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-21336)

WordPress Plugin open-flash-chart-core Remote Code Execution (0.4)

Oracle Application Server Other Vulnerability (CVE-2007-0222)

WordPress Plugin CSV Import Cross-Site Scripting (1.0)

WordPress 3.7.1 Multiple Vulnerabilities (3.7 - 3.7.1)

Severity

Medium

Classification

CVE-2008-3221 CWE-352

Tags

Missing Update Known Vulnerabilities