• info
• discussion
• exploit
• solution
• references

Drupal Cross-Site Request Forgery Vulnerability

Drupal is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to use a victim's cookie credentials to perform actions with the application.

Versions prior to Drupal 5.2 are affected by this issue.