Code injection

The Fivestar module 6.x-1.x before 6.x-1.20 for Drupal does not properly validate voting data, which allows remote attackers to manipulate voting averages via a negative value in the vote parameter...

CVE-2012-2096

The Fivestar module 6.x-1.x before 6.x-1.20 for Drupal does not properly validate voting data, which allows remote attackers to manipulate voting averages via a negative value in the vote parameter...

CVE-2012-2096

The CVE-2012-2096 issue concerns the Drupal Fivestar module (6.x-1.x prior to 6.x-1.20). The vulnerability stems from insufficient validation of votes submitted via the asynchronous voting widget, allowing remote attackers to manipulate voting averages by sending a negative vote value. The adviso...