CVE-2008-3743

Multiple cross-site request forgery (CSRF) vulnerabilities in forms in Drupal 6.x before 6.4 allow remote attackers to perform unspecified actions via unknown vectors, related to improper token validation for (1) cached forms and (2) forms with AHAH elements.

Link	Resource
http://drupal.org/node/295053
http://secunia.com/advisories/31825
https://bugzilla.redhat.com/show_bug.cgi?id=459108
http://www.securityfocus.com/bid/30689
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html
http://secunia.com/advisories/31462
http://www.vupen.com/english/advisories/2008/2392
https://exchange.xforce.ibmcloud.com/vulnerabilities/44453

Configuration 1

cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*

---

Published : 2008-08-27 03:21

Updated : 2017-08-08 01:32

---

NVD link : CVE-2008-3743

Mitre link : CVE-2008-3743

No products.

CWE-352