CVE-2015-4364

Multiple cross-site request forgery CSRF vulnerabilities in includes/campaignmonitorlists.admin.inc in the Campaign Monitor module 7.x-1.0 for Drupal allow remote attackers to hijack the authentication of users for requests that 1 enable list subscriptions via a request to...

CVE-2015-4364

CVE-2015-4364 covers CSRF flaws in the Drupal Campaign Monitor module (7.x-1.0)—specifically in includes/campaignmonitor_lists.admin.inc—that allow remote attackers to hijack a user’s authentication to enable or disable list subscriptions via URLs like /admin/config/services/campaignmonitor/lists...

Drupal Campaign Monitor Module Cross-Site Request Forgery Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Campaign Monitor is one of the modules that integrates with the Campaign Monitor API to enable subscription to Drupal site management lists. A cross-site request forgery vulnerability...