|
CVE Reference: CVE-2008-0571
|
|
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.
|
|
Original Page at CVE MITRE:
CVE-2008-0571
|
|
Description:
The point moderation form in the Userpoints 4.7.x before 4.7.x-2.3, 5.x-2 before 5.x-2.16, and 5.x-3 before 5.x-3.3 module for Drupal does not follow Drupal's Forms API submission model, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and manipulate points.
|
|
CVE Status:
Candidate
|
|
References:
SAID
Secunia Advisory: SA28730
CONFIRM
http://drupal.org/node/216023
|
|
|
Return to the previous page.
|
