CVE-2008-6384

Multiple cross-site request forgery (CSRF) vulnerabilities in Comment Mail 5.x before 5.x-1.1, a module for Drupal, allow remote attackers to hijack the authentication of administrators.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2009-03-02

Last modified

2024-08-07

Weaknesses

CWE-352

Affected products

• Comment Mail (Drupal)

References

• http://drupal.org/node/339495
• http://osvdb.org/50206
• http://secunia.com/advisories/32905
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46944