NVD

Id
51218  
Name
CVE-2009-4066  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the "My Account" feature in PHPList Integration module 5 before 5.x-1.2 and 6 before 6.x-1.1 for Drupal allow remote attackers to hijack the authentication of arbitrary users via vectors related to (1) subscribing or (2) unsubscribing to mailing lists.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-11-23  
Modified Date
2009-11-24  
Seq
2009-4066  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
259820 51218 CVE-2009-4066 http://drupal.org/node/636398  View
259821 51218 CVE-2009-4066 http://drupal.org/node/636400  View
259822 51218 CVE-2009-4066 http://drupal.org/node/636412  View
259823 51218 CVE-2009-4066 37054  View
259824 51218 CVE-2009-4066 phplist-unspecified-csrf(54336)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42909 JVNDB-2009-003916 Drupal 用の PHPList Integration モジュールの "My Account" 機能におけるクロスサイトリクエストフォージェリの脆弱性 Drupal 用の PHPList Integration モジュールの "My Account" 機能には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2009-4066 41497 CVE-2009-4066 51218 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003916.html 2009-11-18 2012-06-26 View