EUVD-2009-1037

Malware in sbrugna...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Plus 1 module before 6.x-2.6, a module for Drupal, allows remote attackers to cast votes for content via unspecified aspects of the URI...

CVE-2009-1036

The linked records indicate a CSRF vulnerability in the Drupal Plus 1 module, versions before 6.x-2.6. The root cause is not described beyond CSRF allowing remote attackers to cast votes for content via unspecified URI aspects. Affected product: Plus 1 module for Drupal (pre-6.x-2.6). There is no...

SA-CONTRIB-2009-010 Plus 1 - Cross-site request forgery

The Plus 1 module provides a voting widget for content that records votes using Ajax. The URL for voting is vulnerable to cross-site request forgeries CSRF making it possible for users to unknowingly vote for content. Versions affected Versions of Plus 1 prior to 6.x-2.6 Drupal core is not...