Unrated severityNVD Advisory· Published Feb 5, 2008· Updated Jun 16, 2026
CVE-2008-0571
CVE-2008-0571
Description
The point moderation form in the Userpoints 4.7.x before 4.7.x-2.3, 5.x-2 before 5.x-2.16, and 5.x-3 before 5.x-3.3 module for Drupal does not follow Drupal's Forms API submission model, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and manipulate points.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:drupal:userpoints_module:4.7:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:drupal:userpoints_module:4.7:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:userpoints_module:5.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- drupal.org/node/216023nvdPatch
- secunia.com/advisories/28730nvdVendor Advisory
- www.vupen.com/english/advisories/2008/0375/referencesnvd
News mentions
0No linked articles in our index yet.