402 matches found
CVE-2021-20621
Cross-site request forgery CSRF vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
newbee-mall Authorization Issues Vulnerability
newbee-mall is an e-commerce system. A security vulnerability exists in newbee-mall that stems from the program being affected by incorrect access controls that cannot be remotely privileged via AdminLoginInterceptor.java. The authentication logic for the system's backend administrator is in the...
CVE-2020-5362
Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup...
Authorization
Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup...
PT-2020-18427
Name of the Vulnerable Software and Affected Versions Dell Client Consumer and Commercial platforms affected versions not specified Description The issue concerns an improper authorization vulnerability in the Dell Manageability interface. An unauthorized actor with local system access and OS...
CVE-2020-5576
Cross-site request forgery CSRF vulnerability in Movable Type series Movable Type 7 r.4606 7.2.1 and earlier Movable Type 7, Movable Type Advanced 7 r.4606 7.2.1 and earlier Movable Type Advanced 7, Movable Type for AWS 7 r.4606 7.2.1 and earlier Movable Type for AWS 7, Movable Type 6.5.3 and...
CVE-2020-5549
Cross-site request forgery CSRF vulnerability in EasyBlocks IPv6 Ver. 2.0.1 and earlier and Enterprise Ver. 2.0.1 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2012-2629
CVE-2012-2629 describes multiple CSRF and XSS vulnerabilities in Axous 1.1.1 and earlier. The issues allow remote attackers to hijack administrator sessions and perform actions such as adding admin accounts (CSRF via admin/administrators_add.php) or injecting script via multiple parameters (for e...
PT-2020-7208
Name of the Vulnerable Software and Affected Versions Axous versions 1.1.1 and earlier Description Multiple cross-site request forgery CSRF and cross-site scripting XSS issues allow remote attackers to hijack the authentication of administrators for requests. This can be done via various paramete...
CVE-2020-5530
Cross-site request forgery CSRF vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2019-6030
Cross-site request forgery CSRF vulnerability in Custom Body Class 0.6.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
PT-2019-17952
Name of the Vulnerable Software and Affected Versions WP Spell Check versions 7.1.9 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators via unspecified vectors. Recommendations For WP Spell Check versions 7.1.9 and...
CVE-2013-6811: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in the D-Link DSL-6740U gateway Rev. H1 allow remote attackers to hijack the authentication of administrators for requests that change administrator credentials or enable remote management services to 1 Custom Services in Port Forwarding, 2...
CVE-2019-5993
Cross-site request forgery CSRF vulnerability in Category Specific RSS feed Subscription version v2.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2019-5992
Cross-site request forgery CSRF vulnerability in WordPress Ultra Simple Paypal Shopping Cart v4.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
PT-2019-17922
Name of the Vulnerable Software and Affected Versions WordPress Ultra Simple Paypal Shopping Cart versions 4.4 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators via unspecified vectors. Recommendations For...
CVE-2019-5984
Cross-site request forgery CSRF vulnerability in Custom CSS Pro 1.0.3 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2019-5973
Cross-site request forgery CSRF vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...