EUVD-2012-5434

Malware in sbrugna...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Commerce Extra Panes module 7.x-1.x before 7.x-1.1 in Drupal allows remote attackers to hijack the authentication of administrators for requests that enable or disable a Commerce extra panes pane via unspecified vectors related to "the link to...

CVE-2012-5542

The vulnerability CVE-2012-5542 affects the Drupal Commerce Extra Panes module (7.x-1.x) prior to 7.x-1.1. The issue is a CSRF flaw that could allow an attacker to trick an administrator into enabling/disabling a Commerce extra panes pane via certain administrative actions (e.g., related to the l...