Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2007-4063

Опубликовано: 30 июл. 2007
Источник: nvd
CVSS2: 4.3
EPSS Низкий

Описание

Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.2 allow remote attackers to (1) delete comments, (2) delete content revisions, and (3) disable menu items as privileged users, related to improper use of HTTP GET and the Forms API.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:5.1_rev1.1:*:*:*:*:*:*:*

EPSS

Процентиль: 59%
0.00395
Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

ubuntu логотип

CVE-2007-4063

ubuntu
почти 18 лет назад

Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.2 allow remote attackers to (1) delete comments, (2) delete content revisions, and (3) disable menu items as privileged users, related to improper use of HTTP GET and the Forms API.

debian логотип

CVE-2007-4063

debian
почти 18 лет назад

Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5 ...

github логотип

GHSA-784p-f8qg-9fqj

github
около 3 лет назад

Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.2 allow remote attackers to (1) delete comments, (2) delete content revisions, and (3) disable menu items as privileged users, related to improper use of HTTP GET and the Forms API.

EPSS

Процентиль: 59%
0.00395
Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other