← Database

CVE-2008-7151

MEDIUM CVSS: 6.8 Published: 2009-09-01 Modified: 2026-06-16

Description

Cross-site request forgery (CSRF) vulnerability in Live 5.x before 5.x-0.1, a module for Drupal, allows remote attackers to hijack the authentication of unspecified privileged users for requests that can be leveraged to execute arbitrary PHP code.

Affected Platforms

Gurpartap Singh LiveDrupal Drupal

Weakness Type

CWE-352

References