CSRF Vulnerability in Drupal Admin Tools Module Allows Authentication Hijacking

CSRF Vulnerability in Drupal Admin Tools Module Allows Authentication Hijacking

CVE-2012-2061 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:P

Cross-site request forgery (CSRF) vulnerability in the Admin tools module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors involving "not checking tokens."

Learn more about our Web Application Penetration Testing UK.