2 matches found
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the XC NCIP Provider module in the eXtensible Catalog XC Drupal Toolkit allows remote attackers to hijack the authentication of users with the "administer ncip providers" permission for requests that alter NCIP providers via a crafted request...
Drupal eXtensible Catalog Drupal Toolkit Module Cross-Site Request Forgery Vulnerability
Drupal is a free, open source content management system developed in PHP. eXtensible Catalog XC Drupal Toolkit is a new generation of discovery services XC Drupal Toolkit module . A cross-site request forgery vulnerability exists in the Drupal eXtensible Catalog Drupal Toolkit module that allows...