CVE-2009-3122

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-09-09 · updated 2026-06-16
Weakness: CWE-264

Description

The Ajax Table module 5.x for Drupal does not perform access control, which allows remote attackers to delete arbitrary users and nodes via unspecified vectors.

Affected products

Chris Shattuck Ajaxtable: 5.x-1.x-dev

References

http://drupal.org/node/560298
http://secunia.com/advisories/36497
http://www.osvdb.org/57435
http://www.securityfocus.com/bid/36165
http://www.vupen.com/english/advisories/2009/2452
https://exchange.xforce.ibmcloud.com/vulnerabilities/52818
http://drupal.org/node/560298
http://secunia.com/advisories/36497
http://www.osvdb.org/57435
http://www.securityfocus.com/bid/36165
http://www.vupen.com/english/advisories/2009/2452
https://exchange.xforce.ibmcloud.com/vulnerabilities/52818

Get alerted when CVE-2009-3122 or the next vulnerability affects your stack