PT-2015-3632

Name of the Vulnerable Software and Affected Versions Savsoft Quiz affected versions not specified Description A cross-site request forgery CSRF issue exists in the index.php/user data/insert user endpoint, allowing remote attackers to hijack administrator authentication for requests that create...

PT-2015-4255

Name of the Vulnerable Software and Affected Versions TP-Link TL-WR840N version prior to 3.13.27 build 141120 Description A cross-site request forgery issue exists in the administration console, allowing remote attackers to hijack administrator authentication for requests that change router...

WordPress Plugin Simplelife Has Multiple Cross-Site Request Forgery Vulnerabilities

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.Simplelife plugin is a plugin for the Simplelife theme. The WordPress plugin Simplelife suffers from multiple cross-site reque...

WordPress Plugin Twitter LiveBlog Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their own weblogs on servers that support PHP and MySQL databases.Twitter LiveBlog plugin is a plugin for dynamic posting of articles or tweets. The WordPress plugin Twitter LiveBlog cross-site request...

WordPress Plugin SimpleFlickr Has Multiple Cross-Site Request Forgery Vulnerabilities

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog site.SimpleFlickr plugin is a plugin to support the picture information will be posted to Flickr. The WordPress plugin...

CosmoShop ePRO Cross-Site Request Forgery Vulnerability

CosmoShop ePRO is a cloud e-commerce system based on Magento. The system is able to quickly complete domain name setup, online store installation, server deployment and product launch. A cross-site request forgery vulnerability exists in CosmoShop ePRO 10.05.00, which allows remote attackers to...

WordPress Plugin PictoBrowser Cross-Site Request Forgery Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.PictoBrowser plugin is a plugin for photo gallery browsing. WordPress plugin PictoBrowser cross-site request forgery...

PHPDug Cross-Site Request Forgery Vulnerability (CNVD-2015-00242)

PHPDug is an open source social news site that supports sharing stories, news, images and more. PHPDug 2.0.0 suffers from a cross-site request forgery vulnerability that allows remote attackers to hijack administrative authentication to hijack authentication of requests for administrars to modify...

Multiple Cross-Site Request Forgery Vulnerabilities in BEdita

BEdita is a web development framework that provides a full-featured content management system. A cross-site request forgery vulnerability exists in versions of BEdita prior to 3.1, which allows remote attackers to exploit the vulnerability to hijack administrator authentication...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the AdminObserver function in e107admin/users.php in e107 2.0 alpha2 allows remote attackers to hijack the authentication of administrators for requests that add users to the administrator group via the id parameter in an admin action...

PT-2015-4201

Name of the Vulnerable Software and Affected Versions vBulletin version 4.2.2 Description A cross-site request forgery CSRF issue exists in the Moderator Control Panel, allowing remote attackers to hijack administrator authentication for various actions, including banning or unbanning a user via...

PT-2015-4222

Name of the Vulnerable Software and Affected Versions e107 version 2.0 alpha2 Description A cross-site request forgery issue exists in the AdminObserver function, allowing remote attackers to hijack administrator authentication for requests that add users to the administrator group. This is...

PT-2015-3511

Name of the Vulnerable Software and Affected Versions whCMS version 0.115 alpha Description A cross-site request forgery issue exists, allowing remote attackers to hijack administrator authentication for requests that modify credentials via a user save action. Recommendations For whCMS version...

PT-2015-3498

Name of the Vulnerable Software and Affected Versions PHPDug version 2.0.0 Description A cross-site request forgery issue exists, allowing remote attackers to hijack administrator authentication for requests that modify credentials. This occurs in the adm/admin edit.php file. Recommendations For...

PT-2015-3507

Name of the Vulnerable Software and Affected Versions Wikipad version 1.6.0 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that modify pages via the datatext parameter. This can lead to unauthorized...

WordPress Plugin SPNbabble Has Multiple Cross-Site Request Forgery Vulnerabilities

WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. Multiple cross-site request forgery vulnerabilities in WordPress plugin SPNbabble 1.4.1 and earlier versions allow remote attackers to hijac...

WordPress Plugin DandyID Services Has Multiple Cross-Site Request Forgery Vulnerabilities

WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. Multiple cross-site request forgery vulnerabilities in WordPress plugin DandyID Services 1.5.9 and earlier versions allow remote attackers t...

PT-2014-8939

Name of the Vulnerable Software and Affected Versions iTwitter plugin versions 0.04 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks. This is achieved via the itex t twitter username...

PT-2014-8756

Name of the Vulnerable Software and Affected Versions Php Scriptlerim Who's Who script affected versions not specified Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of...

CVE-2014-2987

Multiple cross-site request forgery CSRF vulnerabilities in EGroupware Enterprise Line EPL before 1.1.20140505, EGroupware Community Edition before 1.8.007.20140506, and EGroupware before 14.1 beta allow remote attackers to hijack the authentication of administrators for requests that 1 create an...