PT-2015-6173

Name of the Vulnerable Software and Affected Versions Drupal Jammer module versions prior to 6.x-1.8 Drupal Jammer module versions 7.x-1.x prior to 7.x-1.4 Description The issue allows remote attackers to hijack the authentication of administrators for requests, specifically for deleting settings...

Multiple Cross-Site Request Forgery Vulnerabilities in Drupal Jammer Module

Drupal is a free and open source content management system developed in PHP. Multiple cross-site request forgery vulnerabilities exist in the Drupal Jammer module, which can be exploited by an attacker to perform certain unauthorized actions and gain access to affected applications...