Description

Multiple cross-site request forgery (CSRF) vulnerabilities in forms in Drupal 6.x before 6.4 allow remote attackers to perform unspecified actions via unknown vectors, related to improper token validation for (1) cached forms and (2) forms with AHAH elements.

Remediation

References

CVE-2008-3743

Related Vulnerabilities

HSQLDB CVE-2022-41853 Vulnerability (CVE-2022-41853)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3966)

Perl Numeric Errors Vulnerability (CVE-2005-3962)

WordPress Plugin 360 Product Viewer Cross-Site Scripting (2.5.1)

WordPress Plugin WP e-Commerce Shop Styling Local File Inclusion (2.9.1)

Severity

Medium

Classification

CVE-2008-3743 CWE-352

Tags

Missing Update Known Vulnerabilities