PT-2015-7100

Name of the Vulnerable Software and Affected Versions PLDT SpeedSurf 504AN devices with firmware GAN9.8U26-4-TX-R6B018-PH.EN Kasda KW58293 devices Description A cross-site request forgery CSRF issue exists in the form2WlanSetup.cgi file, allowing remote attackers to hijack administrator...

PT-2015-7483

Name of the Vulnerable Software and Affected Versions Drupal OSF module versions 7.x-3.x before 7.x-3.1 Description A cross-site request forgery CSRF issue exists in the OSF module for Drupal. This issue allows remote attackers to hijack the authentication of administrators for requests that crea...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Pligg CMS 2.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via a request to admin/adminusers.php...

PT-2015-7308

Name of the Vulnerable Software and Affected Versions Pligg CMS version 2.0.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that add an administrator via a request to "admin/admin users.php". Recommendations...

CVE-2015-4677

Cross-site request forgery CSRF vulnerability in FiverrScript aka Fiverr Script 7.2 allows remote attackers to hijack the authentication of administrators for requests that create a new admin via a request to administrator/adminscreate.php...

CVE-2015-2805: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in sec/content/secasauserslocaldbadd.html in the management web interface in Alcatel-Lucent OmniSwitch 6450, 6250, 6850E, 9000E, 6400, 6855, 6900, 10K, and 6860 with firmware 6.4.5.R02, 6.4.6.R01, 6.6.4.R01, 6.6.5.R02, 7.3.2.R01, 7.3.3.R01, 7.3.4.R01,...

PT-2015-6537

Name of the Vulnerable Software and Affected Versions Drupal Watchdog Aggregator module affected versions not specified Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for requests that enable or disable monitoring sites...

PT-2015-6534

Name of the Vulnerable Software and Affected Versions Drupal Spider Video Player module affected versions not specified Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for requests that delete videos. Recommendations At...

Multiple Cross-Site Request Forgery Vulnerabilities in phpMyAdmin

phpMyAdmin is a WWW interface to the MySQL database online management tools, the main features include online creation of data tables, run SQL statements, search query data and import and export data and so on. Multiple cross-site request forgery vulnerabilities exist in phpMyAdmin, allowing remo...

CVE-2015-3141

Multiple cross-site request forgery CSRF vulnerabilities in Synametrics Technologies Xeams 4.5 Build 5755 and earlier allow remote attackers to hijack the authentication of administrators for requests that create an 1 SMTP domain or a 2 user via a request to /FrontController; or conduct cross-sit...

WordPress Plugin TheCartPress eCommerce Shopping Cart Cross-Site Request Forgery Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.TheCartPress eCommerce Shopping Cart plugin for WordPress is an eCommerce shopping cart plugin for WordPress based ...

PT-2015-6372

Name of the Vulnerable Software and Affected Versions TheCartPress eCommerce Shopping Cart plugin for WordPress versions prior to 1.3.9.3 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that conduct directory...

CVE-2014-5361

Multiple cross-site request forgery CSRF vulnerabilities in Landesk Management Suite 9.6 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 start, 2 stop, or 3 restart services via a request to remote/serverServices.aspx...

PT-2015-5701

Name of the Vulnerable Software and Affected Versions pfSense versions prior to 2.2.1 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for requests that delete arbitrary files via the deletefile parameter in the system...

PT-2015-5828

Name of the Vulnerable Software and Affected Versions ASUS RT-G32 routers versions 2.0.2.6 through 2.0.3.2 Description A cross-site request forgery issue allows remote attackers to hijack administrator authentication for requests that change the administrator password via a request to "start...

PT-2015-5480

Name of the Vulnerable Software and Affected Versions Contact Form DB plugin versions prior to 2.8.32 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that delete all plugin records via a request in the...

PT-2015-5278

Name of the Vulnerable Software and Affected Versions Gecko CMS versions 2.2 through 2.3 Description A cross-site request forgery issue allows remote attackers to hijack administrator authentication for requests that add a new administrator user via a newuser request to "admin/index.php"...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID or 2 change the password via a crafted request...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in PHPJabbers Appointment Scheduler 2.0 allow remote attackers to hijack the authentication of administrators for requests that 1 conduct cross-site scripting XSS attacks via the i18n1name parameter in a pjActionCreate action to the...

CVE-2014-100005

Multiple cross-site request forgery CSRF vulnerabilities in D-Link DIR-600 router rev. Bx with firmware before 2.17b02 allow remote attackers to hijack the authentication of administrators for requests that 1 create an administrator account or 2 enable remote management via a crafted configuratio...