CVE-2012-2069

Cross-site request forgery CSRF vulnerability in the Wishlist module 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.6 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting XSS sequences via the 1 wlreveal or 2 q parameter...

CVE-2012-2069

CVE-2012-2069 is a CSRF/XSS vulnerability in the Drupal Wishlist module. Affected: Wishlist 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.6. Cause: insufficient filtering of user-supplied text from the URL enabling remote attackers to hijack user authentication to trigger cross-site scripting v...

CVE-2012-2069

Cross-site request forgery CSRF vulnerability in the Wishlist module 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.6 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting XSS sequences via the 1 wlreveal or 2 q parameter...