PT-2015-6531

Name of the Vulnerable Software and Affected Versions Drupal Spider Contacts module affected versions not specified Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that delete contact categories. Recommendatio...

Multiple Cross-Site Request Forgery Vulnerabilities in Drupal Spider Contacts Module

Drupal is an open source content management platform. Multiple cross-site request forgery vulnerabilities exist in the Drupal Spider Contacts module, which could be exploited by an attacker to perform certain unauthorized actions and gain access to vulnerable applications...