GCVE - cpe:2.3:a:lullabot:fivestar_module_for

Approved changes feed: RSS · Atom

cpe:2.3:a:lullabot:fivestar_module_for_drupal:6.x-1.x:*:*:*:*:*:*:*

part: a version: 6.x-1.x update: *

Vendor	Lullabot (`135fd51c-264c-52ec-b874-8878d405683a`)
Product	Fivestar Module For Drupal (`c051541e-e339-51e0-9411-17acab2a71ca`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-2096`	vulnerable	2026-06-08 05:00:52.806366	Details available The Fivestar module 6.x-1.x before 6.x-1.20 for Drupal does not properly validate voting data, which allows remote attackers to manipulate voting averages via a negative value in the vote parameter. Published: 2012-08-14T21:00:00.000Z Updated: 2024-09-16T18:59:34.001Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/52984 http://www.openwall.com/lists/oss-security/2012/04/11/4 http://drupal.org/node/1528614 http://drupal.org/node/1528600 http://secunia.com/advisories/48788	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.