Lucene search
+L

3 matches found

NVD
NVD
added 2012/12/03 9:55 p.m.17 views

CVE-2012-5542

Cross-site request forgery CSRF vulnerability in the Commerce Extra Panes module 7.x-1.x before 7.x-1.1 in Drupal allows remote attackers to hijack the authentication of administrators for requests that enable or disable a Commerce extra panes pane via unspecified vectors related to "the link to...

6.8CVSS7.1AI score0.00711EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2012/12/03 9:0 p.m.24 views

CVE-2012-5542

Cross-site request forgery CSRF vulnerability in the Commerce Extra Panes module 7.x-1.x before 7.x-1.1 in Drupal allows remote attackers to hijack the authentication of administrators for requests that enable or disable a Commerce extra panes pane via unspecified vectors related to "the link to...

7.1AI score0.00711EPSS
SaveExploits0References7
CVE
CVE
added 2012/12/03 9:0 p.m.36 views

CVE-2012-5542

The vulnerability CVE-2012-5542 affects the Drupal Commerce Extra Panes module (7.x-1.x) prior to 7.x-1.1. The issue is a CSRF flaw that could allow an attacker to trick an administrator into enabling/disabling a Commerce extra panes pane via certain administrative actions (e.g., related to the l...

6.8CVSS7.3AI score0.00711EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder