Vulnerability Details CVE-2008-1981
Cross-site request forgery (CSRF) vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0 beta1, a Drupal module, allows remote attackers to perform unauthorized actions as other users via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.8%
CVSS Severity
CVSS v2 Score 6.8
References
- http://drupal.org/node/250408
- http://secunia.com/advisories/29960
- http://www.vupen.com/english/advisories/2008/1353/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41978
- http://drupal.org/node/250408
- http://secunia.com/advisories/29960
- http://www.vupen.com/english/advisories/2008/1353/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41978
Products affected by CVE-2008-1981
-
cpe:2.3:a:e-publish_project:e-publish:5.x-1.0
-
cpe:2.3:a:e-publish_project:e-publish:5.x-1.x
-
cpe:2.3:a:e-publish_project:e-publish:6.x-1.x