FreeBSD Ports: drupal5

The remote host is missing an update to the system as announced in the referenced advisory. VID 4451a4c9-c05e-11dc-982e-001372fd0af2 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-0272

CVE-2008-0272 affects the Drupal aggregator module (Drupal 4.7.x before 4.7.11 and 5.x before 5.6). The issue is a cross-site request forgery that lets remote attackers delete items from a feed as privileged users, using a simple GET request. OpenVAS/NVD entries corroborate the CSRF wording and i...

CVE-2008-0272

Cross-site request forgery CSRF vulnerability in the aggregator module in Drupal 4.7.x before 4.7.11 and 5.x before 5.6 allows remote attackers to delete items from a feed as privileged users...