CVE-2013-5937
Click2Sell Suite module 6.x-1.x - Cross-Site Request Forgery via Drupal Form API
Title source: llmDescription
Cross-site request forgery (CSRF) vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete database information via vectors involving the Drupal Form API.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/97203
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/87052
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/10/21/5
Mailing List mailing-list
x_refsource_fulldisc
http://seclists.org/fulldisclosure/2013/Sep/64
Vendor Advisory x_refsource_misc
https://drupal.org/node/2087055
Scores
EPSS
0.0064
EPSS Percentile
46.5%
Details
CWE
CWE-352
Status
published
Products (1)
click2sell/click2sell_suite_module
6.x-1.0
Published
Sep 25, 2013
Tracked Since
Feb 18, 2026