CVE-2015-4364

Multiple cross-site request forgery CSRF vulnerabilities in includes/campaignmonitorlists.admin.inc in the Campaign Monitor module 7.x-1.0 for Drupal allow remote attackers to hijack the authentication of users for requests that 1 enable list subscriptions via a request to...

CVE-2015-4364

CVE-2015-4364 covers CSRF flaws in the Drupal Campaign Monitor module (7.x-1.0)—specifically in includes/campaignmonitor_lists.admin.inc—that allow remote attackers to hijack a user’s authentication to enable or disable list subscriptions via URLs like /admin/config/services/campaignmonitor/lists...

PT-2015-6546

Name of the Vulnerable Software and Affected Versions Campaign Monitor module versions 7.x-1.0 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the Campaign Monitor module for Drupal. These vulnerabilities allow remote attackers to hijack the authenticati...

CVE-2015-4364: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in includes/campaignmonitorlists.admin.inc in the Campaign Monitor module 7.x-1.0 for Drupal allow remote attackers to hijack the authentication of users for requests that 1 enable list subscriptions via a request to...

Drupal Campaign Monitor Module Cross-Site Request Forgery Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Campaign Monitor is one of the modules that integrates with the Campaign Monitor API to enable subscription to Drupal site management lists. A cross-site request forgery vulnerability...

PT-2012-5430

Name of the Vulnerable Software and Affected Versions Campaign Monitor module for Drupal versions prior to 6.x-2.5 Description A cross-site scripting XSS issue exists in the administrative interface of the Campaign Monitor module for Drupal, allowing remote attackers to inject arbitrary web scrip...