Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Comment Mail 5.x before 5.x-1.1, a module for Drupal, allow remote attackers to hijack the authentication of administrators.
References
- 50206 vdb-entry
- commentmail-unspecified-csrf(46944) vdb-entry
- http://drupal.org/node/339495
- 32905 third-party-advisory