CVE-2012-1057

MEDIUM 6.0CVE-2012-1057 · Published 14/02/2012 · updated 16/06/2026

In short

CVE-2012-1057 is a MEDIUM (CVSS 6.0) vulnerability affecting forward (sean robertson).
Chance of exploitation in the next 30 days (EPSS): 0.62%, higher than 50.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
forward sean_robertson	`= 6.x-1.0= 6.x-1.1= 6.x-1.10= 6.x-1.11= 6.x-1.12= 6.x-1.13= 6.x-1.14= 6.x-1.15= 6.x-1.16= 6.x-1.17= 6.x-1.18= 6.x-1.19= 6.x-1.2= 6.x-1.20= 6.x-1.3= 6.x-1.4= 6.x-1.5= 6.x-1.6= 6.x-1.7= 6.x-1.8= 6.x-1.9= 6.x-1.x-dev= 7.x-1.0= 7.x-1.1= 7.x-1.2= 7.x-1.x-dev`	No fix yet

Description

Cross-site request forgery (CSRF) vulnerability in the clickthrough tracking functionality in the Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of administrators for requests that increase node rankings via the tracking code, possibly related to improper "flood control."

References

More vulnerabilities in forward

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free