CVE-2007-4063

Published: Jul 30, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.2 allow remote attackers to (1) delete comments, (2) delete content revisions, and (3) disable menu items as privileged users, related to improper use of HTTP GET and the Forms API.

Affected (3)

Products: Drupal: Drupal

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Drupal Drupal	Version 5.0
Drupal Drupal	Version 5.1
Drupal Drupal	Version 5.1_rev1.1

References (12)

http://drupal.org/files/sa-2007-017/advisory.txt

Source: cve@mitre.org

Patch

http://osvdb.org/37898

Source: cve@mitre.org

http://secunia.com/advisories/26224

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/25099

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2007/2697

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/35639

Source: cve@mitre.org

http://drupal.org/files/sa-2007-017/advisory.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://osvdb.org/37898

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26224

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/25099

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.vupen.com/english/advisories/2007/2697

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/35639

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.