NVD

Id
43085  
Name
CVE-2012-1057  
Description
Cross-site request forgery (CSRF) vulnerability in the clickthrough tracking functionality in the Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of administrators for requests that increase node rankings via the tracking code, possibly related to improper "flood control."  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-02-13  
Modified Date
2012-02-14  
Seq
2012-1057  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
216784 43085 CVE-2012-1057 http://drupal.org/node/1423722  View
216785 43085 CVE-2012-1057 http://drupal.org/node/1425150  View
216786 43085 CVE-2012-1057 http://drupalcode.org/project/forward.git/commitdiff/72158fdbfbf5a068938985e3d10ce1d8f969d9c3  View
216787 43085 CVE-2012-1057 51826  View
216788 43085 CVE-2012-1057 drupal-forward-unspecified-csrf(72922)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25700 JVNDB-2012-001407 Drupal 用 Forward モジュールのクリックスルートラッキング機能におけるクロスサイトリクエストフォージェリの脆弱性 Drupal 用 Forward モジュールのクリックスルートラッキング機能には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2012-1057 54295 CVE-2012-1057 43085 6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001407.html 2012-02-14 2012-02-15 View