← Database

CVE-2008-6384

MEDIUM CVSS: 6.8 Published: 2009-03-02 Modified: 2026-06-16

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Comment Mail 5.x before 5.x-1.1, a module for Drupal, allow remote attackers to hijack the authentication of administrators.

Affected Platforms

Drupal Comment Mail

Weakness Type

CWE-352

References