EUVD-2012-2062

Malware in sbrugna...

PT-2022-9386 · Crafter +3 · Crafter Cms +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A logged-in and authenticated user with a Reviewer Role may lock a content item. There is no information provided about the estimated number of...

Drupal Content Lock模块跨站请求伪造漏洞

Bugtraq ID:65835 Drupal是一套开放源码的内容管理平台。 Drupal Content Lock存在跨站请求伪造漏洞，允许远程攻击者构建恶意URI，诱使用户解析，可以目标用户上下文执行恶意操作。 0 Drupal Content Lock 6.x Drupal Content Lock 7.x 目前没有详细解决方案提供： http://drupal.org/project/contentlock...

SA-CONTRIB-2014-024 - Content Lock - CSRF

This module prevents people from editing the same content at the same time. It adds a locking layer to nodes. It does not protect from CSRF. CVE identifiers issued ACVE identifier will be requested, and added upon issuance, in accordance with Drupal Security Team processes. Versions affected All...

CVE-2012-2056

Cross-site request forgery CSRF vulnerability in the Content Lock module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Content Lock module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-2056

Cross-site request forgery CSRF vulnerability in the Content Lock module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-2056

Content Lock (Drupal) is affected by a CSRF vulnerability due to the module not using a token for unlocking content, enabling an attacker to hijack the authentication of victims via CSRF vectors described in the Drupal advisory. Affected versions: all Content Lock releases. Exploitation details a...

SA-CONTRIB-2012-036 - Multiple Modules Unsupported

CVE: CVE-2012-2056 Content Lock Is a module that prevents users from concurrent editing of nodes. This module does not use a token for unlocking a content lock. This leads to a CSRF attack vector. CVE: CVE-2012-2057 Ubercart Bulk Stock Updater is an extension module for Ubercart 2.x running on...