QwikSec

Security Database

CVE

CWE

Training

CVE-2010-1547

Published: May 21, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) enable a page via a q=admin/build/pages/nojs/enable/ value or (2) disable a page via a q=admin/build/pages/nojs/disable/ value.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

chaos-tool-unspecified-csrf(58722)

vdb-entry

x_refsource_XF

third-party-advisory

x_refsource_SECUNIA

20100520 Drupal Chaos Tools Suite (Ctools) Module Multiple Vulns

mailing-list

x_refsource_FULLDISC

http://drupal.org/node/803944

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

http://www.madirish.net/?article=458

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.