medium6.4
CVE-2009-3122
The Ajax Table module 5.x for Drupal does not perform access control, which allows remote attackers to delete arbitrary users and nodes via unspecified vectors.
Impact
The Ajax Table module 5.x for Drupal does not perform access control, which allows remote attackers to delete arbitrary users and nodes via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chris Shattuck | Ajaxtable | Version 5.x-1.x-dev |
Weakness classification
References
- NVD record
- CVE.org record
- http://drupal.org/node/560298
- http://secunia.com/advisories/36497
- http://www.osvdb.org/57435
- http://www.securityfocus.com/bid/36165
- http://www.vupen.com/english/advisories/2009/2452
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52818
- http://drupal.org/node/560298
- http://secunia.com/advisories/36497
- http://www.osvdb.org/57435
- http://www.securityfocus.com/bid/36165
- http://www.vupen.com/english/advisories/2009/2452
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52818