PT-2015-6578

Name of the Vulnerable Software and Affected Versions Drupal Keyword Research module versions 6.x-1.x before 6.x-1.2 Description The issue allows remote attackers to hijack the authentication of users with the "kwresearch admin site keywords" permission for requests that create, delete, or set...

Drupal Keyword Research Module Cross-Site Request Forgery Vulnerability

Drupal is an open source content management system.Keyword Research is a module that provides keywords for searches. A cross-site request forgery vulnerability exists in the Drupal Keyword Research module that allows remote attackers to construct malicious URIs, trick users into parsing them, and...