6 matches found
Code injection
The Fivestar module 6.x-1.x before 6.x-1.20 for Drupal does not properly validate voting data, which allows remote attackers to manipulate voting averages via a negative value in the vote parameter...
CVE-2012-2096
The Fivestar module 6.x-1.x before 6.x-1.20 for Drupal does not properly validate voting data, which allows remote attackers to manipulate voting averages via a negative value in the vote parameter...
CVE-2012-2096
The CVE-2012-2096 issue concerns the Drupal Fivestar module (6.x-1.x prior to 6.x-1.20). The vulnerability stems from insufficient validation of votes submitted via the asynchronous voting widget, allowing remote attackers to manipulate voting averages by sending a negative vote value. The adviso...
CVE-2012-2096
The Fivestar module 6.x-1.x before 6.x-1.20 for Drupal does not properly validate voting data, which allows remote attackers to manipulate voting averages via a negative value in the vote parameter...
CVE-2012-2096: Improper Input Validation
The Fivestar module 6.x-1.x before 6.x-1.20 for Drupal does not properly validate voting data, which allows remote attackers to manipulate voting averages via a negative value in the vote parameter...
PT-2012-3804
Name of the Vulnerable Software and Affected Versions Fivestar module versions prior to 6.x-1.20 for Drupal Description The issue allows remote attackers to manipulate voting averages by providing a negative value in the vote parameter, due to improper validation of voting data. Recommendations F...