Lucene search
HistorySep 01, 2009 - 4:30 p.m.
CVE-2008-7151
csrf
vulnerability
drupal
live 5.x
nvd
remote attackers
authentication
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
52.5%
Cross-site request forgery (CSRF) vulnerability in Live 5.x before 5.x-0.1, a module for Drupal, allows remote attackers to hijack the authentication of unspecified privileged users for requests that can be leveraged to execute arbitrary PHP code.
Affected configurations
Node
gurpartap_singhliveMatch5.x-1.x-dev
drupaldrupal
| CPE | Name | Operator | Version |
|---|---|---|---|
| gurpartap_singh:live | gurpartap singh live | eq | 5.x-1.x-dev |
Related
nvd
nvd
CVE-2008-7151
2009-09-01 16:30:00
cvelist
cvelist
CVE-2008-7151
2009-09-01 16:00:00
prion
prion
Cross site request forgery (csrf)
2009-09-01 16:30:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
52.5%
Related for CVE-2008-7151