Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the update feature in Drupal 5.x before 5.13 and 6.x before 6.7 allow remote attackers to perform unauthorized actions as the superuser via unspecified vectors, as demonstrated by causing the superuser to "execute old updates" that modify the database.

Remediation

References

CVE-2008-6532

Related Vulnerabilities

Oracle JRE CVE-2013-2407 Vulnerability (CVE-2013-2407)

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43729)

WordPress Plugin GoDaddy Email Marketing Cross-Site Request Forgery (1.1.2)

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1725)

WordPress Plugin Classified Listing-Classified ads & Business Directory Cross-Site Scripting (2.2.13)

Severity

Medium

Classification

CVE-2008-6532 CWE-352

Tags

Missing Update Known Vulnerabilities