https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 17:13:27 +0000 https://cve.radiocsirt.org/vuln/certfr-2015-avi-367 certfr-2015-avi-367 https://cve.radiocsirt.org/vuln/certfr-2015-avi-367 https://cve.radiocsirt.org/vuln/cnvd-2015-05686 cnvd-2015-05686 https://cve.radiocsirt.org/vuln/cnvd-2015-05686 https://cve.radiocsirt.org/vuln/euvd-2026-94374 EUVD-2026-94374 https://cve.radiocsirt.org/vuln/euvd-2026-94374 https://cve.radiocsirt.org/vuln/fkie_cve-2015-6660 <p>The Form API in Drupal 6.x before 6.37 and 7.x before 7.39 does not properly validate the form token, which allows remote attackers to conduct CSRF attacks that upload files in a different user&#39;s account via vectors related to &#34;file upload value callbacks.&#34;</p> <p>The Form API in Drupal 6.x before 6.37 and 7.x before 7.39 does not properly validate the form token, which allows remote attackers to conduct CSRF attacks that upload files in a different user&#39;s account via vectors related to &#34;file upload value callbacks.&#34;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-6660 https://cve.radiocsirt.org/vuln/ghsa-vfw4-2ffw-69gw <p>The Form API in Drupal 6.x before 6.37 and 7.x before 7.39 does not properly validate the form token, which allows remote attackers to conduct CSRF attacks that upload files in a different user&#39;s account via vectors related to &#34;file upload value callbacks.&#34;</p> <p>The Form API in Drupal 6.x before 6.37 and 7.x before 7.39 does not properly validate the form token, which allows remote attackers to conduct CSRF attacks that upload files in a different user&#39;s account via vectors related to &#34;file upload value callbacks.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-vfw4-2ffw-69gw https://cve.radiocsirt.org/vuln/gsd-2015-6660 gsd-2015-6660 https://cve.radiocsirt.org/vuln/gsd-2015-6660 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-6660 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: drupal7</p> <p>The Form API in Drupal 6.x before 6.37 and 7.x before 7.39 does not properly validate the form token, which allows remote attackers to conduct CSRF attacks that upload files in a different user&#39;s account via vectors related to &#34;file upload value callbacks.&#34;</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: drupal7</p> <p>The Form API in Drupal 6.x before 6.37 and 7.x before 7.39 does not properly validate the form token, which allows remote attackers to conduct CSRF attacks that upload files in a different user&#39;s account via vectors related to &#34;file upload value callbacks.&#34;</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-6660