CVE-2012-5542: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Commerce Extra Panes module 7.x-1.x before 7.x-1.1 in Drupal allows remote attackers to hijack the authentication of administrators for requests that enable or disable a Commerce extra panes pane via unspecified vectors related to "the link to...

PT-2012-6013

Name of the Vulnerable Software and Affected Versions Drupal Commerce Extra Panes module versions 7.x-1.x before 7.x-1.1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that enable or disable a Commerce extra...