CVE-2013-4230

The mm_webform submodule in the Monster Menus module 6.x-6.x before 6.x-6.61 and 7.x-1.x before 7.x-1.13 for Drupal does not properly restrict access to webform submissions, which allows remote authenticated users with the "Who can read data submitted to this webform" permission to delete arbitrary submissions via unspecified vectors.

• CWE-264

• http://secunia.com/advisories/54391Vendor Advisory
• http://www.openwall.com/lists/oss-security/2013/08/10/1
• http://www.securityfocus.com/bid/61711
• https://drupal.org/node/2059805Patch
• https://drupal.org/node/2059807Patch
• https://drupal.org/node/2059823Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86326
• http://secunia.com/advisories/54391Vendor Advisory
• http://www.openwall.com/lists/oss-security/2013/08/10/1
• http://www.securityfocus.com/bid/61711
• https://drupal.org/node/2059805Patch
• https://drupal.org/node/2059807Patch
• https://drupal.org/node/2059823Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86326

Published

Aug 21, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-4224Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-4225The RESTful Web Services (restws) module 7.x-1.x before 7.x-…8.8
• CVE-2013-4226The Authenticated User Page Caching (Authcache) module 7.x-1…6.5
• CVE-2013-4227Cross-site request forgery (CSRF) vulnerability in the perso…8.8
• CVE-2013-4228The OG access fields (visibility fields) implementation in O…4.3
• CVE-2013-4229Cross-site scripting (XSS) vulnerability in the Monster Menu…
• CVE-2013-4231Multiple buffer overflows in libtiff before 4.0.3 allow remo…
• CVE-2013-4232Use-after-free vulnerability in the t2p_readwrite_pdf_image …
• CVE-2013-4233Integer overflow in the abc_set_parts function in load_abc.c…
• CVE-2013-4234Multiple heap-based buffer overflows in the (1) abc_MIDI_dru…
• CVE-2013-4235shadow: TOCTOU (time-of-check time-of-use) race condition wh…4.7
• CVE-2013-4236VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows p…