CVE-2012-2716: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Comment Moderation module 6.x-1.x before 6.x-1.1 for Drupal allows remote attackers to hijack the authentication of administrators for requests that publish comments...

PT-2012-1865

Name of the Vulnerable Software and Affected Versions Symphony CMS versions prior to 2.2.4 Description The issue allows remote authenticated users with Author permissions to execute arbitrary SQL commands via the filter parameter to 1 "symphony/publish/comments" or 2 "symphony/publish/images" API...