CVE-2012-2096

The Fivestar module 6.x-1.x before 6.x-1.20 for Drupal does not properly validate voting data, which allows remote attackers to manipulate voting averages via a negative value in the vote parameter.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:lullabot:fivestar_module_for_drupal:6.x-1.x:*:*:*:*:*:*:*
cpe:2.3:a:lullabot:fivestar_module_for_drupal:6.x-1.20:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*

Information

Published : 2012-08-14 14:55

Updated : 2012-08-14 21:00


NVD link : CVE-2012-2096

Mitre link : CVE-2012-2096


JSON object : View

CWE
CWE-20

Improper Input Validation

Advertisement

dedicated server usa

Products Affected

drupal

  • drupal

lullabot

  • fivestar_module_for_drupal