2216 matches found
PT-2013-4426
Name of the Vulnerable Software and Affected Versions ShareThis plugin versions prior to 7.0.6 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that modify the plugin's settings. Recommendations For versions prior t...
CVE-2013-3479: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the ShareThis plugin before 7.0.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify this plugin's settings...
CVE-2013-5471: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the web framework in Cisco Global Site Selector GSS allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuh42164...
CVE-2013-3472: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Enterprise License Manager ELM in Cisco Unified Communications Manager CM allows remote attackers to hijack the authentication of arbitrary users for requests that make ELM modifications, aka Bug ID CSCui58210...
PT-2013-4422
Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager CM affected versions not specified Description A cross-site request forgery CSRF issue in the Enterprise License Manager ELM of Cisco Unified Communications Manager CM allows remote attackers to hijack the...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in saveProperties.html in Corporater EPM Suite allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords...
CVE-2013-3029: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Administrative console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in core/admin/modules/users/update.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify arbitrary user accounts via an edit user action...
PT-2013-5258
Name of the Vulnerable Software and Affected Versions BigTree CMS versions 4.0 RC2 and earlier Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that create an administrative user via an add user action to "index.php...
CVE-2013-4881
Cross-site request forgery CSRF vulnerability in core/admin/modules/users/create.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create an administrative user via an add user action to index.php...
CVE-2013-4881: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in core/admin/modules/users/create.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create an administrative user via an add user action to index.php...
PT-2013-4775
Name of the Vulnerable Software and Affected Versions IBM InfoSphere BigInsights versions 2.0 through 2.1 Description A cross-site request forgery CSRF issue allows remote authenticated users to hijack the authentication of unspecified victims. Recommendations For IBM InfoSphere BigInsights...
CVE-2013-3992: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in IBM InfoSphere BigInsights 2.0 through 2.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...
CVE-2013-3451: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in Cisco Unified Communications Manager Unified CM allow remote attackers to hijack the authentication of arbitrary users for requests that perform arbitrary Unified CM operations, aka Bug ID CSCui13033...
PT-2013-4404
Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager Unified CM affected versions not specified Description The issue allows remote attackers to hijack the authentication of arbitrary users for requests that perform arbitrary Unified CM operations...
CVE-2013-3450: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the User WebDialer page in Cisco Unified Communications Manager Unified CM allows remote attackers to hijack the authentication of arbitrary users for requests that dial calls, aka Bug ID CSCui13028...
CVE-2013-4671
Cross-site request forgery CSRF vulnerability in the management console on the Symantec Web Gateway SWG appliance before 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the management console on the Symantec Web Gateway SWG appliance before 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...
CVE-2013-4911: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in Siemens WinCC TIA Portal 11 and 12 before 12 SP1 allows remote attackers to hijack the authentication of unspecified victims by leveraging improper configuration of SIMATIC HMI panels by the WinCC product...
PT-2013-5266
Name of the Vulnerable Software and Affected Versions Siemens WinCC TIA Portal versions 11 through 12 before 12 SP1 Description A cross-site request forgery CSRF issue exists due to improper configuration of SIMATIC HMI panels by the WinCC product, allowing remote attackers to hijack the...