Lucene search
+L

CVE-2007-6752

🗓️ 28 Mar 2012 10:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 75 Views🌐 WEB

CSRF vulnerability in Drupal 7.12 allows hijacking authentication

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
cvelist
Cvelist
CVE-2007-6752
28 Mar 201210:00
cvelist
debiancve
Debian CVE
CVE-2007-6752
28 Mar 201210:00
debiancve
nessus
Tenable Nessus
Drupal 7.x < 7.13 Multiple Vulnerabilities
21 Apr 202000:00
nessus
nessus
Tenable Nessus
Linux Distros Unpatched Vulnerability : CVE-2007-6752
7 Aug 202500:00
nessus
exploitdb
Exploit DB
Drupal 7.12 - Multiple Vulnerabilities
2 Mar 201200:00
exploitdb
nvd
NVD
CVE-2007-6752
28 Mar 201210:54
nvd
osv
OSV
UBUNTU-CVE-2007-6752
28 Mar 201210:54
osv
packetstorm
Packet Storm
Drupal CMS 7.12 Cross Site Request Forgery
2 Mar 201200:00
packetstorm
prion
Prion
Cross site request forgery (csrf)
28 Mar 201210:54
prion
ptsecurity
Positive Technologies
PT-2012-1262 · Drupal · Drupal
28 Mar 201200:00
ptsecurity
Rows per page
NVD
Node
OR
drupaldrupalRange7.12
drupaldrupalMatch4.0
drupaldrupalMatch4.0.0
drupaldrupalMatch4.1.0
drupaldrupalMatch4.2.0_rc
drupaldrupalMatch4.4
drupaldrupalMatch4.4.0
drupaldrupalMatch4.4.1
drupaldrupalMatch4.4.2
drupaldrupalMatch4.4.3
drupaldrupalMatch4.5
drupaldrupalMatch4.5.0
drupaldrupalMatch4.5.1
drupaldrupalMatch4.5.2
drupaldrupalMatch4.5.3
drupaldrupalMatch4.5.4
drupaldrupalMatch4.5.5
drupaldrupalMatch4.5.6
drupaldrupalMatch4.5.7
drupaldrupalMatch4.5.8
drupaldrupalMatch4.6
drupaldrupalMatch4.6.0
drupaldrupalMatch4.6.1
drupaldrupalMatch4.6.2
drupaldrupalMatch4.6.3
drupaldrupalMatch4.6.4
drupaldrupalMatch4.6.5
drupaldrupalMatch4.6.6
drupaldrupalMatch4.6.7
drupaldrupalMatch4.6.8
drupaldrupalMatch4.6.9
drupaldrupalMatch4.6.10
drupaldrupalMatch4.6.11
drupaldrupalMatch4.7
drupaldrupalMatch4.7.0
drupaldrupalMatch4.7.1
drupaldrupalMatch4.7.2
drupaldrupalMatch4.7.3
drupaldrupalMatch4.7.4
drupaldrupalMatch4.7.5
drupaldrupalMatch4.7.6
drupaldrupalMatch4.7.7
drupaldrupalMatch4.7.8
drupaldrupalMatch4.7.9
drupaldrupalMatch4.7.10
drupaldrupalMatch4.7_rev_1.2
drupaldrupalMatch4.7_rev_1.15
drupaldrupalMatch4.7_rev1.15
drupaldrupalMatch4.7_revision_1.2
drupaldrupalMatch5.0
drupaldrupalMatch5.0beta1
drupaldrupalMatch5.0beta2
drupaldrupalMatch5.0dev
drupaldrupalMatch5.0rc1
drupaldrupalMatch5.0rc2
drupaldrupalMatch5.1
drupaldrupalMatch5.1_rev1.1
drupaldrupalMatch5.2
drupaldrupalMatch5.3
drupaldrupalMatch5.4
drupaldrupalMatch5.5
drupaldrupalMatch5.5.
drupaldrupalMatch5.6
drupaldrupalMatch5.7
drupaldrupalMatch5.8
drupaldrupalMatch5.9
drupaldrupalMatch5.10
drupaldrupalMatch5.11
drupaldrupalMatch5.12
drupaldrupalMatch5.13
drupaldrupalMatch5.14
drupaldrupalMatch5.15
drupaldrupalMatch5.16
drupaldrupalMatch5.17
drupaldrupalMatch5.18
drupaldrupalMatch5.19
drupaldrupalMatch5.20
drupaldrupalMatch5.21
drupaldrupalMatch5.22
drupaldrupalMatch5.23
drupaldrupalMatch5.xdev
drupaldrupalMatch6.0
drupaldrupalMatch6.0beta1
drupaldrupalMatch6.0beta2
drupaldrupalMatch6.0beta3
drupaldrupalMatch6.0beta4
drupaldrupalMatch6.0dev
drupaldrupalMatch6.0rc-1
drupaldrupalMatch6.0rc-2
drupaldrupalMatch6.0rc-3
drupaldrupalMatch6.0rc-4
drupaldrupalMatch6.0rc1
drupaldrupalMatch6.0rc2
drupaldrupalMatch6.0rc3
drupaldrupalMatch6.0rc4
drupaldrupalMatch6.1
drupaldrupalMatch6.2
drupaldrupalMatch6.3
drupaldrupalMatch6.4
drupaldrupalMatch6.5
drupaldrupalMatch6.6
drupaldrupalMatch6.7
drupaldrupalMatch6.8
drupaldrupalMatch6.9
drupaldrupalMatch6.10
drupaldrupalMatch6.11
drupaldrupalMatch6.12
drupaldrupalMatch6.13
drupaldrupalMatch6.14
drupaldrupalMatch6.15
drupaldrupalMatch6.16
drupaldrupalMatch6.17
drupaldrupalMatch6.18
drupaldrupalMatch6.19
drupaldrupalMatch6.20
drupaldrupalMatch6.21
drupaldrupalMatch6.22
drupaldrupalMatch6.23
drupaldrupalMatch6.24
drupaldrupalMatch6.x-dev
drupaldrupalMatch7.0
drupaldrupalMatch7.0alpha1
drupaldrupalMatch7.0alpha2
drupaldrupalMatch7.0alpha3
drupaldrupalMatch7.0alpha4
drupaldrupalMatch7.0alpha5
drupaldrupalMatch7.0alpha6
drupaldrupalMatch7.0alpha7
drupaldrupalMatch7.0beta1
drupaldrupalMatch7.0beta2
drupaldrupalMatch7.0beta3
drupaldrupalMatch7.0dev
drupaldrupalMatch7.0rc1
drupaldrupalMatch7.0rc2
drupaldrupalMatch7.0rc3
drupaldrupalMatch7.0rc4
drupaldrupalMatch7.1
drupaldrupalMatch7.2
drupaldrupalMatch7.3
drupaldrupalMatch7.4
drupaldrupalMatch7.5
drupaldrupalMatch7.6
drupaldrupalMatch7.7
drupaldrupalMatch7.8
drupaldrupalMatch7.9
drupaldrupalMatch7.10
drupaldrupalMatch7.11
drupaldrupalMatch7.x-dev
ParameterPositionPathDescriptionCWE
namerequest body/drupal/admin/people/create?render=overlay&render=overlayCSRF exploit to create an administrator via POST to Drupal 7.12 vulnerable endpoint.CWE-352
mailrequest body/drupal/admin/people/create?render=overlay&render=overlayCSRF exploit to create an administrator via POST to Drupal 7.12 vulnerable endpoint.CWE-352
pass[pass1]request body/drupal/admin/people/create?render=overlay&render=overlayCSRF exploit to create an administrator via POST to Drupal 7.12 vulnerable endpoint.CWE-352
pass[pass2]request body/drupal/admin/people/create?render=overlay&render=overlayCSRF exploit to create an administrator via POST to Drupal 7.12 vulnerable endpoint.CWE-352
statusrequest body/drupal/admin/people/create?render=overlay&render=overlayCSRF exploit to create an administrator via POST to Drupal 7.12 vulnerable endpoint.CWE-352
roles[3]request body/drupal/admin/people/create?render=overlay&render=overlayCSRF exploit to create an administrator via POST to Drupal 7.12 vulnerable endpoint.CWE-352
timezonerequest body/drupal/admin/people/create?render=overlay&render=overlayCSRF exploit to create an administrator via POST to Drupal 7.12 vulnerable endpoint.CWE-352
form_build_idrequest body/drupal/admin/people/create?render=overlay&render=overlayCSRF exploit to create an administrator via POST to Drupal 7.12 vulnerable endpoint.CWE-352
form_tokenrequest body/drupal/admin/people/create?render=overlay&render=overlayCSRF exploit to create an administrator via POST to Drupal 7.12 vulnerable endpoint.CWE-352
form_idrequest body/drupal/admin/people/create?render=overlay&render=overlayCSRF exploit to create an administrator via POST to Drupal 7.12 vulnerable endpoint.CWE-352
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 22:48Current
7.3High risk
Vulners AI Score7.3
CVSS 26.8
EPSS0.03707
75