EUVD-2015-3425

Malware in sbrugna...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Feature Set module for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 enable or 2 disable a module via unspecified vectors...

Drupal Feature Set Module Cross-Site Request Forgery Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Feature Set is one of the modules used to enable or disable a feature or group of modules. A cross-site request forgery vulnerability exists in the Drupal Feature Set module. A remote...