CVE-2008-6169
19.02.2009, 15:30
Cross-site request forgery (CSRF) vulnerability in the Localization client 5.x before 5.x-1.1 and 6.x before 6.x-1.6 and the Localization server 5.x before 5.x-1.0-alpha5 and 6.x before 6.x-alpha2, modules for Drupal, allows remote attackers to perform unauthorized actions as administrators via unspecified vectors related to the "local translation submission interface."
| Vendor | Product | Version |
|---|---|---|
| drupal | localization_client | 𝑥 ≤ 5.x-1.0 |
| drupal | localization_client | 𝑥 ≤ 6.x-1.5 |
| drupal | localization_client | 5.x-1.xdev:x |
| drupal | localization_client | 6.x-1.0:x |
| drupal | localization_client | 6.x-1.1:x |
| drupal | localization_client | 6.x-1.2:x |
| drupal | localization_client | 6.x-1.3:x |
| drupal | localization_client | 6.x-1.4:x |
| drupal | localization_client | 6.x-1.xdev:x |
| drupal | localization_server | 𝑥 ≤ 5.x-1.0alpha4 |
| drupal | localization_server | 𝑥 ≤ 6.x-1.0alpha1 |
| drupal | localization_server | 5.x-1.0alpha1:x |
| drupal | localization_server | 5.x-1.0alpha2:x |
| drupal | localization_server | 5.x-1.0alpha3:x |
| drupal | localization_server | 5.x-1.xdev:x |
| drupal | localization_server | 6.x-1.xdev:x |
𝑥
= Vulnerable software versions
Common Weakness Enumeration