PT-2012-3816

Name of the Vulnerable Software and Affected Versions Drupal Commerce Reorder module versions prior to 7.x-1.1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users for requests that add items to the shopping cart...