CVE-2015-3374

CVE-2015-3374 affects the Drupal Corner module. The vulnerability allows remote attackers to hijack administrator sessions by forcing the admin’s browser to perform CSRF requests to enable or disable corners, via unspecified vectors. Affected are Corner module versions prior to a fixed release; D...

CVE-2015-3374

Multiple cross-site request forgery CSRF vulnerabilities in the Corner module for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 enable or 2 disable corners via unspecified vectors...