Insufficient Access Control in Drupal Payment for Webform Module
CVE-2013-4594
Currently unrated
What is CVE-2013-4594?
The Payment for Webform module prior to version 7.x-1.5 for Drupal features an inadequate access control mechanism that fails to restrict anonymous users. This flaw allows these users to exploit the payment functionality, potentially using payment methods intended for other users. When submitting forms that require payment, unauthorized access may lead to misuse of payment capabilities, posing a risk to both users and site administrators.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.