Lucene search
K

CVE-2007-6752

🗓️ 28 Mar 2012 10:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 67 Views🌐 WEB

CSRF vulnerability in Drupal 7.12 allows hijacking authentication

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Cvelist
CVE-2007-6752
28 Mar 201210:00
cvelist
Debian CVE
CVE-2007-6752
28 Mar 201210:00
debiancve
Tenable Nessus
Drupal 7.x < 7.13 Multiple Vulnerabilities
21 Apr 202000:00
nessus
Tenable Nessus
Linux Distros Unpatched Vulnerability : CVE-2007-6752
7 Aug 202500:00
nessus
NVD
CVE-2007-6752
28 Mar 201210:54
nvd
OSV
UBUNTU-CVE-2007-6752
28 Mar 201210:54
osv
Packet Storm
Drupal CMS 7.12 Cross Site Request Forgery
2 Mar 201200:00
packetstorm
Prion
Cross site request forgery (csrf)
28 Mar 201210:54
prion
Positive Technologies
PT-2012-1262 · Drupal · Drupal
28 Mar 201200:00
ptsecurity
UbuntuCve
CVE-2007-6752
28 Mar 201210:54
ubuntucve
Rows per page
NVD
Node
drupaldrupalRange7.12
OR
drupaldrupalMatch4.0
OR
drupaldrupalMatch4.0.0
OR
drupaldrupalMatch4.1.0
OR
drupaldrupalMatch4.2.0_rc
OR
drupaldrupalMatch4.4
OR
drupaldrupalMatch4.4.0
OR
drupaldrupalMatch4.4.1
OR
drupaldrupalMatch4.4.2
OR
drupaldrupalMatch4.4.3
OR
drupaldrupalMatch4.5
OR
drupaldrupalMatch4.5.0
OR
drupaldrupalMatch4.5.1
OR
drupaldrupalMatch4.5.2
OR
drupaldrupalMatch4.5.3
OR
drupaldrupalMatch4.5.4
OR
drupaldrupalMatch4.5.5
OR
drupaldrupalMatch4.5.6
OR
drupaldrupalMatch4.5.7
OR
drupaldrupalMatch4.5.8
OR
drupaldrupalMatch4.6
OR
drupaldrupalMatch4.6.0
OR
drupaldrupalMatch4.6.1
OR
drupaldrupalMatch4.6.2
OR
drupaldrupalMatch4.6.3
OR
drupaldrupalMatch4.6.4
OR
drupaldrupalMatch4.6.5
OR
drupaldrupalMatch4.6.6
OR
drupaldrupalMatch4.6.7
OR
drupaldrupalMatch4.6.8
OR
drupaldrupalMatch4.6.9
OR
drupaldrupalMatch4.6.10
OR
drupaldrupalMatch4.6.11
OR
drupaldrupalMatch4.7
OR
drupaldrupalMatch4.7.0
OR
drupaldrupalMatch4.7.1
OR
drupaldrupalMatch4.7.2
OR
drupaldrupalMatch4.7.3
OR
drupaldrupalMatch4.7.4
OR
drupaldrupalMatch4.7.5
OR
drupaldrupalMatch4.7.6
OR
drupaldrupalMatch4.7.7
OR
drupaldrupalMatch4.7.8
OR
drupaldrupalMatch4.7.9
OR
drupaldrupalMatch4.7.10
OR
drupaldrupalMatch4.7_rev_1.2
OR
drupaldrupalMatch4.7_rev_1.15
OR
drupaldrupalMatch4.7_rev1.15
OR
drupaldrupalMatch4.7_revision_1.2
OR
drupaldrupalMatch5.0
OR
drupaldrupalMatch5.0beta1
OR
drupaldrupalMatch5.0beta2
OR
drupaldrupalMatch5.0dev
OR
drupaldrupalMatch5.0rc1
OR
drupaldrupalMatch5.0rc2
OR
drupaldrupalMatch5.1
OR
drupaldrupalMatch5.1_rev1.1
OR
drupaldrupalMatch5.2
OR
drupaldrupalMatch5.3
OR
drupaldrupalMatch5.4
OR
drupaldrupalMatch5.5
OR
drupaldrupalMatch5.5.
OR
drupaldrupalMatch5.6
OR
drupaldrupalMatch5.7
OR
drupaldrupalMatch5.8
OR
drupaldrupalMatch5.9
OR
drupaldrupalMatch5.10
OR
drupaldrupalMatch5.11
OR
drupaldrupalMatch5.12
OR
drupaldrupalMatch5.13
OR
drupaldrupalMatch5.14
OR
drupaldrupalMatch5.15
OR
drupaldrupalMatch5.16
OR
drupaldrupalMatch5.17
OR
drupaldrupalMatch5.18
OR
drupaldrupalMatch5.19
OR
drupaldrupalMatch5.20
OR
drupaldrupalMatch5.21
OR
drupaldrupalMatch5.22
OR
drupaldrupalMatch5.23
OR
drupaldrupalMatch5.xdev
OR
drupaldrupalMatch6.0
OR
drupaldrupalMatch6.0beta1
OR
drupaldrupalMatch6.0beta2
OR
drupaldrupalMatch6.0beta3
OR
drupaldrupalMatch6.0beta4
OR
drupaldrupalMatch6.0dev
OR
drupaldrupalMatch6.0rc-1
OR
drupaldrupalMatch6.0rc-2
OR
drupaldrupalMatch6.0rc-3
OR
drupaldrupalMatch6.0rc-4
OR
drupaldrupalMatch6.0rc1
OR
drupaldrupalMatch6.0rc2
OR
drupaldrupalMatch6.0rc3
OR
drupaldrupalMatch6.0rc4
OR
drupaldrupalMatch6.1
OR
drupaldrupalMatch6.2
OR
drupaldrupalMatch6.3
OR
drupaldrupalMatch6.4
OR
drupaldrupalMatch6.5
OR
drupaldrupalMatch6.6
OR
drupaldrupalMatch6.7
OR
drupaldrupalMatch6.8
OR
drupaldrupalMatch6.9
OR
drupaldrupalMatch6.10
OR
drupaldrupalMatch6.11
OR
drupaldrupalMatch6.12
OR
drupaldrupalMatch6.13
OR
drupaldrupalMatch6.14
OR
drupaldrupalMatch6.15
OR
drupaldrupalMatch6.16
OR
drupaldrupalMatch6.17
OR
drupaldrupalMatch6.18
OR
drupaldrupalMatch6.19
OR
drupaldrupalMatch6.20
OR
drupaldrupalMatch6.21
OR
drupaldrupalMatch6.22
OR
drupaldrupalMatch6.23
OR
drupaldrupalMatch6.24
OR
drupaldrupalMatch6.x-dev
OR
drupaldrupalMatch7.0
OR
drupaldrupalMatch7.0alpha1
OR
drupaldrupalMatch7.0alpha2
OR
drupaldrupalMatch7.0alpha3
OR
drupaldrupalMatch7.0alpha4
OR
drupaldrupalMatch7.0alpha5
OR
drupaldrupalMatch7.0alpha6
OR
drupaldrupalMatch7.0alpha7
OR
drupaldrupalMatch7.0beta1
OR
drupaldrupalMatch7.0beta2
OR
drupaldrupalMatch7.0beta3
OR
drupaldrupalMatch7.0dev
OR
drupaldrupalMatch7.0rc1
OR
drupaldrupalMatch7.0rc2
OR
drupaldrupalMatch7.0rc3
OR
drupaldrupalMatch7.0rc4
OR
drupaldrupalMatch7.1
OR
drupaldrupalMatch7.2
OR
drupaldrupalMatch7.3
OR
drupaldrupalMatch7.4
OR
drupaldrupalMatch7.5
OR
drupaldrupalMatch7.6
OR
drupaldrupalMatch7.7
OR
drupaldrupalMatch7.8
OR
drupaldrupalMatch7.9
OR
drupaldrupalMatch7.10
OR
drupaldrupalMatch7.11
OR
drupaldrupalMatch7.x-dev
ParameterPositionPathDescriptionCWE
namerequest bodydrupal/admin/people/createCSRF vulnerability allowing admin/user changes via crafted POST to Drupal admin create endpointCWE-352
mailrequest bodydrupal/admin/people/createCSRF vulnerability allowing admin/user changes via crafted POST to Drupal admin create endpointCWE-352
pass[pass1]request bodydrupal/admin/people/createCSRF vulnerability allowing admin/user changes via crafted POST to Drupal admin create endpointCWE-352
pass[pass2]request bodydrupal/admin/people/createCSRF vulnerability allowing admin/user changes via crafted POST to Drupal admin create endpointCWE-352
statusrequest bodydrupal/admin/people/createCSRF vulnerability allowing admin/user changes via crafted POST to Drupal admin create endpointCWE-352
roles[3]request bodydrupal/admin/people/createCSRF vulnerability allowing admin/user changes via crafted POST to Drupal admin create endpointCWE-352
timezonerequest bodydrupal/admin/people/createCSRF vulnerability allowing admin/user changes via crafted POST to Drupal admin create endpointCWE-352
form_build_idrequest bodydrupal/admin/people/createCSRF vulnerability allowing admin/user changes via crafted POST to Drupal admin create endpointCWE-352
form_tokenrequest bodydrupal/admin/people/createCSRF vulnerability allowing admin/user changes via crafted POST to Drupal admin create endpointCWE-352
form_idrequest bodydrupal/admin/people/createCSRF vulnerability allowing admin/user changes via crafted POST to Drupal admin create endpointCWE-352
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

29 Apr 2026 01:13Current
7.3High risk
Vulners AI Score7.3
CVSS 26.8
EPSS0.01503
67