NetSight
medium5.8

CVE-2015-4349

Cross-site request forgery (CSRF) vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the authentication of administrators…

Impact

Cross-site request forgery (CSRF) vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete contact categories via unspecified vectors.

Affected products

VendorProductAffected versions
Spider Contacts ProjectSpider Contacts
All versions

Weakness classification

References