Detections
Analytics
CVE-2008-3743
high
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in forms in Drupal 6.x before 6.4 allow remote attackers to perform unspecified actions via unknown vectors, related to improper token validation for (1) cached forms and (2) forms with AHAH elements.
References
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/44453
https://bugzilla.redhat.com/show_bug.cgi?id=459108
http://www.vupen.com/english/advisories/2008/2392
http://www.securityfocus.com/bid/30689
http://secunia.com/advisories/31825