Cross site request forgery (csrf)

2013-09-2514:55:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.6%

JSON

Cross-site request forgery (CSRF) vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete database information via vectors involving the Drupal Form API.

CPENameOperatorVersion
click2sell_suite_moduleeq6.120.10

CPE	Name	Operator	Version
	click2sell_suite_module	eq	6.120.10

References

osvdb.org/97203

seclists.org/fulldisclosure/2013/Sep/64

www.openwall.com/lists/oss-security/2013/10/21/5

drupal.org/node/2087055

exchange.xforce.ibmcloud.com/vulnerabilities/87052