CVE-2009-1036

The linked records indicate a CSRF vulnerability in the Drupal Plus 1 module, versions before 6.x-2.6. The root cause is not described beyond CSRF allowing remote attackers to cast votes for content via unspecified URI aspects. Affected product: Plus 1 module for Drupal (pre-6.x-2.6). There is no...