CVE-2013-1972

Cross-site request forgery CSRF vulnerability in the elFinder file manager module 6.x-0.x before 6.x-0.8 and 7.x-0.x before 7.x-0.8 for Drupal allows remote attackers to hijack the authentication of unspecified victims to create, modify, or delete files via unknown vectors...

CVE-2013-1972

The CVE-2013-1972 entry maps to Drupal-contributed elFinder file manager module vulnerabilities: CSRF in elFinder 6.x-0.x (before 6.x-0.8) and 7.x-0.x (before 7.x-0.8) could allow remote attackers to hijack user sessions and create, modify, or delete files via unknown vectors. A Drupal SA-CONTRIB...

CVE-2013-1972: Improper Neutralization of Input During Web Page Generation

Cross-site request forgery CSRF vulnerability in the elFinder file manager module 6.x-0.x before 6.x-0.8 and 7.x-0.x before 7.x-0.8 for Drupal allows remote attackers to hijack the authentication of unspecified victims to create, modify, or delete files via unknown vectors...

PT-2013-3498

Name of the Vulnerable Software and Affected Versions elFinder file manager module versions 6.x-0.x before 6.x-0.8 elFinder file manager module versions 7.x-0.x before 7.x-0.8 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of...

SA-CONTRIB-2013-044 - elFinder file manager - Cross Site Request Forgery (CSRF)

The elfinder module provides an AJAX-based file manager based on the elFinder javascript library. The module doesn't sufficiently verify requests thereby exposing a Cross Site Request Forgery CSRF vulnerability. This would enable an attacker to create, modify, or delete files on the server. There...