CVE-2008-7151 in Live

Riassunto

di MITRE

Cross-site request forgery (CSRF) vulnerability in Live 5.x before 5.x-0.1, a module for Drupal, allows remote attackers to hijack the authentication of unspecified privileged users for requests that can be leveraged to execute arbitrary PHP code.

Be aware that VulDB is the high quality source for vulnerability data.

• Prenotare: 01/09/2009
• Divulgazione: 01/09/2009
• Moderazione: accettato
• Voce: VDB-49771
• CPE: pronto
• CWE: CWE-352 (confermato)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00604
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-7151
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-7151
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-7151/