Total vulnerabilities in the database
Multiple cross-site request forgery (CSRF) vulnerabilities in the "My Account" feature in PHPList Integration module 5 before 5.x-1.2 and 6 before 6.x-1.1 for Drupal allow remote attackers to hijack the authentication of arbitrary users via vectors related to (1) subscribing or (2) unsubscribing to mailing lists.
| Software | From | Fixed in |
|---|---|---|
| drupal / drupal | - | - |
| paul_beaney / phplist | 5.x-1.0 | 5.x-1.0.x |
| paul_beaney / phplist | 5.x-1.1 | 5.x-1.1.x |
| paul_beaney / phplist | 5.x-1.x-dev | 5.x-1.x-dev.x |
| paul_beaney / phplist | 6.x-1.0 | 6.x-1.0.x |
| paul_beaney / phplist | 6.x-1.x-dev | 6.x-1.x-dev.x |