CVE-2012-2096

The Fivestar module 6.x-1.x before 6.x-1.20 for Drupal does not properly validate voting data, which allows remote attackers to manipulate voting averages via a negative value in the vote parameter...

CVE-2012-2096

The CVE-2012-2096 issue concerns the Drupal Fivestar module (6.x-1.x prior to 6.x-1.20). The vulnerability stems from insufficient validation of votes submitted via the asynchronous voting widget, allowing remote attackers to manipulate voting averages by sending a negative vote value. The adviso...

SA-CONTRIB-2012-058 - Fivestar - Input Validation

CVE: CVE-2012-2096 The Fivestar module enables you to add a voting widget to nodes and comments. The module does not sufficiently validate all votes passed by the asynchronous voting widget allowing a malicious user to improperly modify voting averages. Versions affected Fivestar 6.x-1.x versions...