CVE-2012-2057

EUVD-2012-2063
Cross-site request forgery (CSRF) vulnerability in the Ubercart Bulk Stock Updater module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors related to formAPI.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 38%
Affected Products (NVD)
VendorProductVersion
miuraubercart_bulk_stock_updater
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://drupal.org/node/1482126
http://www.openwall.com/lists/oss-security/2012/04/07/1
http://www.securityfocus.com/bid/52502
https://exchange.xforce.ibmcloud.com/vulnerabilities/74054
http://drupal.org/node/1482126
http://www.openwall.com/lists/oss-security/2012/04/07/1
http://www.securityfocus.com/bid/52502
https://exchange.xforce.ibmcloud.com/vulnerabilities/74054