CVE-2009-3122

The Ajax Table module 5.x for Drupal does not perform access control, which allows remote attackers to delete arbitrary users and nodes via unspecified vectors.

Score

CVSS 2.0 6.4 Medium

Status

Modified - cve@mitre.org

Published

2009-09-09

Last modified

2024-08-07

Weaknesses

CWE-264

Affected products

• Ajaxtable (Chris Shattuck)

References

• http://drupal.org/node/560298
• http://secunia.com/advisories/36497
• http://www.osvdb.org/57435
• http://www.securityfocus.com/bid/36165
• http://www.vupen.com/english/advisories/2009/2452
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52818