EUVD-2015-4413

Malware in sbrugna...

Drupal User Import Module Cross-Site Request Forgery Vulnerability

Drupal is a free and open source content management system developed in PHP.User Import is a module that provides the ability to import users. A cross-site request forgery vulnerability exists in the Drupal User Import module that allows remote attackers to construct malicious URIs, trick users...

CVE-2015-4390

The vulnerability CVE-2015-4390 affects the Drupal contributed module User Import (versions 6.x-4.x prior to 6.x-4.4 and 7.x-2.x prior to 7.x-2.3). A Cross-Site Request Forgery (CSRF) flaw exists in management URLs that could trick an administrator into continuing or deleting an ongoing import, e...