CVE-2010-1547
published 2010-05-21CVE-2010-1547: Multiple cross-site request forgery (CSRF) vulnerabilities in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for Drupal allow remote attackers to…
PriorityP423medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
0.67%
48.5th percentile
Multiple cross-site request forgery (CSRF) vulnerabilities in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) enable a page via a q=admin/build/pages/nojs/enable/ value or (2) disable a page via a q=admin/build/pages/nojs/disable/ value.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chaos_tool_suite_project | ctools | — | — |
| chaos_tool_suite_project | ctools | — | — |
| chaos_tool_suite_project | ctools | — | — |
| chaos_tool_suite_project | ctools | — | — |
| chaos_tool_suite_project | ctools | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://drupal.org/node/803944http://seclists.org/fulldisclosure/2010/May/272http://secunia.com/advisories/39884http://www.madirish.net/?article=458http://www.securityfocus.com/bid/40285https://exchange.xforce.ibmcloud.com/vulnerabilities/58722http://drupal.org/node/803944http://seclists.org/fulldisclosure/2010/May/272http://secunia.com/advisories/39884http://www.madirish.net/?article=458http://www.securityfocus.com/bid/40285https://exchange.xforce.ibmcloud.com/vulnerabilities/58722
2010-05-21
Published