Filtered by vendor Lullabot Subscriptions
Filtered by product Fivestar Module For Drupal Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2012-2096 2 Drupal, Lullabot 2 Drupal, Fivestar Module For Drupal 2024-11-21 N/A
The Fivestar module 6.x-1.x before 6.x-1.20 for Drupal does not properly validate voting data, which allows remote attackers to manipulate voting averages via a negative value in the vote parameter.
CVE-2009-2572 2 Drupal, Lullabot 2 Drupal, Fivestar Module For Drupal 2024-11-21 N/A
Cross-site request forgery (CSRF) vulnerability in the Fivestar module 5.x-1.x before 5.x-1.14 and 6.x-1.x before 6.x-1.14, a module for Drupal, allows remote attackers to hijack the authentication of arbitrary users for requests that cast votes.