medium6.8
CVE-2012-2057
Cross-site request forgery (CSRF) vulnerability in the Ubercart Bulk Stock Updater module for Drupal allows remote attackers to hijack the authentication of un…
Impact
Cross-site request forgery (CSRF) vulnerability in the Ubercart Bulk Stock Updater module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors related to formAPI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Miura | Ubercart Bulk Stock Updater | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://drupal.org/node/1482126
- http://www.openwall.com/lists/oss-security/2012/04/07/1
- http://www.securityfocus.com/bid/52502
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74054
- http://drupal.org/node/1482126
- http://www.openwall.com/lists/oss-security/2012/04/07/1
- http://www.securityfocus.com/bid/52502
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74054