CVE-2012-1057

Cross-site request forgery (CSRF) vulnerability in the clickthrough tracking functionality in the Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before…

published February 14, 2012

CVSS
—
EPSS
1%
Percentile
47.8
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability in the clickthrough tracking functionality in the Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of administrators for requests that increase node rankings via the tracking code, possibly related to improper "flood control."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00601 · 47.8th percentile
Published
2012-02-14T00:00Z
EPSS history
Timeline
  • 14 FEB 00:00Z
    Cross-site request forgery (CSRF) vulnerability in the clickthrough tracking functionality in the Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before…
    cvelistv5