CVE

Id
81639  
CVE No.
CVE-2015-4362  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in tracking_code.admin.inc in the Tracking Code module 7.x-1.x before 7.x-1.6 for Drupal allows remote attackers to hijack the authentication of administrators for requests that disable tracking codes via unspecified vectors.  
Phase
Assigned (20150605)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
733239 81639 CVE-2015-4362 MLIST:[oss-security] 20150425 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-034 to SA-CONTRIB-2015-099)  View
733240 81639 CVE-2015-4362 URL:http://www.openwall.com/lists/oss-security/2015/04/25/6  View
733241 81639 CVE-2015-4362 MISC:https://www.drupal.org/node/2445961  View
733242 81639 CVE-2015-4362 CONFIRM:http://cgit.drupalcode.org/tracking_code/commit/?id=77c8c3d  View
733243 81639 CVE-2015-4362 CONFIRM:https://www.drupal.org/node/2450135  View
733244 81639 CVE-2015-4362 CONFIRM:https://www.drupal.org/node/2453079  View
733245 81639 CVE-2015-4362 BID:72958  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
7881 JVNDB-2015-003201 WordPress 用 SE HTML5 Album Audio Player プラグインの download_audio.php におけるディレクトリトラバーサルの脆弱性 WordPress 用 SE HTML5 Album Audio Player (se-html5-album-audio-player) プラグインの download_audio.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2015-4414 81639 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003201.html  View