CVE-2009-1036

Cross-site request forgery (CSRF) vulnerability in the Plus 1 module before 6.x-2.6, a module for Drupal, allows remote attackers to cast votes for content via unspecified aspects of the URI.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:drupal:plus1:6.x-1.0:*:*:*:*:*:*:*
cpe:2.3:a:drupal:plus1:6.x-1.1:*:*:*:*:*:*:*
cpe:2.3:a:drupal:plus1:6.x-2.1:*:*:*:*:*:*:*
cpe:2.3:a:drupal:plus1:6.x-2.0:*:*:*:*:*:*:*
cpe:2.3:a:drupal:plus1:6.x-2.0:beta2:*:*:*:*:*:*
cpe:2.3:a:drupal:plus1:6.x-2.0:beta3:*:*:*:*:*:*
cpe:2.3:a:drupal:plus1:*:*:*:*:*:*:*:*
cpe:2.3:a:drupal:plus1:6.x-2.0:beta4:*:*:*:*:*:*
cpe:2.3:a:drupal:plus1:6.x-2.0:beta5:*:*:*:*:*:*
cpe:2.3:a:drupal:plus1:6.x-2.2:*:*:*:*:*:*:*
cpe:2.3:a:drupal:plus1:6.x-1.2:*:*:*:*:*:*:*
cpe:2.3:a:drupal:plus1:6.x-2.4:*:*:*:*:*:*:*
cpe:2.3:a:drupal:plus1:6.x-2.3:*:*:*:*:*:*:*
cpe:2.3:a:drupal:plus1:6.x-1.3:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*

Information

Published : 2009-03-20 11:30

Updated : 2017-08-16 18:30


NVD link : CVE-2009-1036

Mitre link : CVE-2009-1036


JSON object : View

CWE
CWE-352

Cross-Site Request Forgery (CSRF)

Advertisement

dedicated server usa

Products Affected

drupal

  • plus1
  • drupal