Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the web framework on the Cisco Identity Services Engine ISE allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuh25506...

CVE-2013-4871

Cross-site request forgery CSRF vulnerability in the TEQneers SEO Enhancements tqseo extension before 5.0.1 for TYPO3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-4871: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the TEQneers SEO Enhancements tqseo extension before 5.0.1 for TYPO3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-3420: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the web framework on the Cisco Identity Services Engine ISE allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuh25506...

CVE-2013-3491: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Sharebar plugin 1.2.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 add or 2 modify buttons, or 3 insert cross-site scripting XSS sequences...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Administration and View pages in Cisco Secure Access Control System ACS allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCud75177...

CVE-2013-2704: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Dropdown Menu Widget plugin 1.9.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting XSS sequences...

PT-2013-4381

Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control System ACS affected versions not specified Description A cross-site request forgery CSRF issue affects Administration and View pages, allowing remote attackers to hijack the authentication of arbitrary users...

CVE-2013-1414

Multiple cross-site request forgery CSRF vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3.13 and 5.x before 5.0.2 allow remote attackers to hijack the authentication of administrators for requests that modify 1 settings or 2 policies, or 3 restart the device via a...

CVE-2013-3395

Cross-site request forgery CSRF vulnerability in the web framework on Cisco IronPort Web Security Appliance WSA devices, Email Security Appliance ESA devices, and Content Security Management Appliance SMA devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs...

CVE-2013-3395: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the web framework on Cisco IronPort Web Security Appliance WSA devices, Email Security Appliance ESA devices, and Content Security Management Appliance SMA devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs...

PT-2013-4352

Name of the Vulnerable Software and Affected Versions Cisco IronPort Web Security Appliance WSA devices affected versions not specified Cisco Email Security Appliance ESA devices affected versions not specified Cisco Content Security Management Appliance SMA devices affected versions not specifie...

PT-2013-3569

Name of the Vulnerable Software and Affected Versions Drupal versions 6.x-3.x through 7.x-3.x before 7.x-3.4 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of victims via unknown vectors. Recommendations For versions 6.x-3.x...

CVE-2013-2158: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Services module 6.x-3.x and 7.x-3.x before 7.x-3.4 for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-3397: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Unified Serviceability component in Cisco Unified Communications Manager CUCM allows remote attackers to hijack the authentication of arbitrary users for requests that perform Unified Serviceability actions, aka Bug ID CSCuh10298...

CVE-2013-1972

Cross-site request forgery CSRF vulnerability in the elFinder file manager module 6.x-0.x before 6.x-0.8 and 7.x-0.x before 7.x-0.8 for Drupal allows remote attackers to hijack the authentication of unspecified victims to create, modify, or delete files via unknown vectors...

CVE-2013-1972: Improper Neutralization of Input During Web Page Generation

Cross-site request forgery CSRF vulnerability in the elFinder file manager module 6.x-0.x before 6.x-0.8 and 7.x-0.x before 7.x-0.8 for Drupal allows remote attackers to hijack the authentication of unspecified victims to create, modify, or delete files via unknown vectors...

PT-2013-3498

Name of the Vulnerable Software and Affected Versions elFinder file manager module versions 6.x-0.x before 6.x-0.8 elFinder file manager module versions 7.x-0.x before 7.x-0.8 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of...

CVE-2013-3250

Cross-site request forgery CSRF vulnerability in the WP Maintenance Mode plugin before 1.8.8 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings...

PT-2013-4349

Name of the Vulnerable Software and Affected Versions Cisco WebEx Social affected versions not specified Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities that allow remote attackers to hijack the authentication of arbitrary users. The exact vectors used for...