CVE-2008-6169

Cross-site request forgery (CSRF) vulnerability in the Localization client 5.x before 5.x-1.1 and 6.x before 6.x-1.6 and the Localization server 5.x before 5.x-1.0-alpha5 and 6.x before 6.x-alpha2, modules for Drupal, allows remote attackers to perform unauthorized actions as administrators via unspecified vectors related to the "local translation submission interface."

Link	Resource
http://secunia.com/advisories/32388	Vendor Advisory
http://drupal.org/node/324862	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/46044

Configuration 1

cpe:2.3:a:drupal:localization_client:*:*:*:*:*:*:*:* cpe:2.3:a:drupal:localization_server:5.x-1.0alpha1:*:*:*:*:*:*:* cpe:2.3:a:drupal:localization_client:6.x-1.4:*:*:*:*:*:*:* cpe:2.3:a:drupal:localization_client:5.x-1.xdev:*:*:*:*:*:*:* cpe:2.3:a:drupal:localization_server:5.x-1.0alpha2:*:*:*:*:*:*:* cpe:2.3:a:drupal:localization_client:6.x-1.0:*:*:*:*:*:*:* cpe:2.3:a:drupal:localization_server:*:*:*:*:*:*:*:* cpe:2.3:a:drupal:localization_server:5.x-1.0alpha3:*:*:*:*:*:*:* cpe:2.3:a:drupal:localization_server:*:*:*:*:*:*:*:* cpe:2.3:a:drupal:localization_client:6.x-1.2:*:*:*:*:*:*:* cpe:2.3:a:drupal:localization_server:5.x-1.xdev:*:*:*:*:*:*:* cpe:2.3:a:drupal:localization_client:6.x-1.xdev:*:*:*:*:*:*:* cpe:2.3:a:drupal:localization_server:6.x-1.xdev:*:*:*:*:*:*:* cpe:2.3:a:drupal:localization_client:6.x-1.3:*:*:*:*:*:*:* cpe:2.3:a:drupal:localization_client:6.x-1.1:*:*:*:*:*:*:* cpe:2.3:a:drupal:localization_client:*:*:*:*:*:*:*:*

---

Published : 2009-02-19 03:30

Updated : 2017-08-17 01:29

---

NVD link : CVE-2008-6169

Mitre link : CVE-2008-6169

No products.

CWE-352