Security Advisory
CVE-2009-1036
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Cross-site request forgery (CSRF) vulnerability in the Plus 1 module before 6.x-2.6, a module for Drupal, allows remote attackers to cast votes for content via unspecified aspects of the URI.