Lucene search
+L

6 matches found

NVD
NVD
•added 2012/09/20 3:46 a.m.•23 views

CVE-2012-1631

Cross-site request forgery CSRF vulnerability in the Admin:hover module for Drupal allows remote attackers to hijack the authentication of administrators for requests that unpublish all nodes, and possibly other actions, via unspecified vectors...

6.8CVSS7.2AI score0.00643EPSS
SaveExploits0References5
Prion
Prion
•added 2012/09/20 3:46 a.m.•23 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Admin:hover module for Drupal allows remote attackers to hijack the authentication of administrators for requests that unpublish all nodes, and possibly other actions, via unspecified vectors...

6.8CVSS7.7AI score0.00643EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2012/09/20 1:00 a.m.•47 views

CVE-2012-1631

Cross-site request forgery CSRF vulnerability in the Admin:hover module for Drupal allows remote attackers to hijack the authentication of administrators for requests that unpublish all nodes, and possibly other actions, via unspecified vectors...

7.2AI score0.00643EPSS
SaveExploits0References5
CVE
CVE
•added 2012/09/20 1:00 a.m.•49 views

CVE-2012-1631

CVE-2012-1631 concerns the Drupal Admin:hover module. The vulnerability is described as a Cross-Site Request Forgery (CSRF) that allows remote attackers to hijack administrator authentication and trigger actions such as unpublishing all nodes; vectors are unspecified in the primary description. T...

6.8CVSS7.4AI score0.00643EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/09/20 12:00 a.m.•3 views

CVE-2012-1631: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Admin:hover module for Drupal allows remote attackers to hijack the authentication of administrators for requests that unpublish all nodes, and possibly other actions, via unspecified vectors...

6.8CVSS5.9AI score0.00643EPSS
SaveExploits0References2
Drupal
Drupal
•added 2012/01/11 12:00 a.m.•40 views

SA-CONTRIB-2012-006 XSS and CSRF in Multiple Modules - Supercron, Taxotouch, Admin:hover, Taxonomy Navigator no longer supported

CVE: CVE-2012-1628 SuperCron is a complete replacement for Drupal's built-in Cron functionality. The module is vulnerable to Cross Site Scripting. The vulnerability is mitigated by an attacker needing to gain an account with "access administration pages" permission. CVE: CVE-2012-1629 Taxotouch...

6.8CVSS6.4AI score0.00941EPSS
SaveExploits0References13
Rows per page
Query Builder