CVE-2010-1547

CVE-2010-1547 describes multiple Cross-Site Request Forgery (CSRF) vulnerabilities within the Chaos Tool Suite (CTools) module for Drupal, specifically versions 6.x before 6.x-1.4. An attacker could exploit these flaws to hijack an administrator's authenticated session, enabling or disabling pages through specific URL parameters. With a CVSS score of 6.8, this vulnerability is rated as medium severity due to its network-based attack vector and medium attack complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. The EPSS score is very low, indicating a minimal likelihood of exploitation. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also absent, suggesting a lack of widespread attention or exploitation.