Description
Cross-site request forgery (CSRF) vulnerability in the Plus 1 module before 6.x-2.6, a module for Drupal, allows remote attackers to cast votes for content via unspecified aspects of the URI.
References
- 52786 vdb-entry
- 34168 vdb-entry
- http://drupal.org/node/405672
- plus1-unspecified-csrf(49310) vdb-entry
- http://drupal.org/node/406314
- 34378 third-party-advisory