CVE-2012-2096 | BDVDB-2026-51530 Detail
Description#
The Fivestar module 6.x-1.x before 6.x-1.20 for Drupal does not properly validate voting data, which allows remote attackers to manipulate voting averages via a negative value in the vote parameter.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.securityfocus.com/bid/52984
- http://www.openwall.com/lists/oss-security/2012/04/11/4
- http://drupal.org/node/1528614
- http://drupal.org/node/1528600
- http://secunia.com/advisories/48788
- http://www.openwall.com/lists/oss-security/2012/04/12/2
- http://drupalcode.org/project/fivestar.git/commitdiff/75dba2c
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.