PT-2012-5611

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1 before 6.1.0.45 IBM WebSphere Application Server versions 7.0 before 7.0.0.25 IBM WebSphere Application Server versions 8.0 before 8.0.0.5 IBM WebSphere Application Server versions 8.5 before 8.5.0...

DEBIAN-CVE-2012-4732

Cross-site request forgery CSRF vulnerability in Request Tracker RT 3.8.12 and other versions before 3.8.15, and 4.0.6 and other versions before 4.0.8, allows remote attackers to hijack the authentication of users for requests that toggle ticket bookmarks...

CVE-2012-4732: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Request Tracker RT 3.8.12 and other versions before 3.8.15, and 4.0.6 and other versions before 4.0.8, allows remote attackers to hijack the authentication of users for requests that toggle ticket bookmarks...

CVE-2012-4486

Cross-site request forgery CSRF vulnerability in the Subuser module before 6.x-1.8 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that switch the user to a subuser via unspecified vectors...

PT-2012-5432

Name of the Vulnerable Software and Affected Versions Drupal Subuser module versions prior to 6.x-1.8 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users for requests that switch the user to a subuser. Recommendations For...

CVE-2012-4486: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Subuser module before 6.x-1.8 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that switch the user to a subuser via unspecified vectors...

DEBIAN-CVE-2011-5223

Cross-site request forgery CSRF vulnerability in logout.php in Cacti before 0.8.7i allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-5223

Cross-site request forgery CSRF vulnerability in logout.php in Cacti before 0.8.7i allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-5226: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in wordpresssentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to hijack the authentication of an administrator for requests that trigger snapshots...

PT-2012-2200

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 0.8.7i Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of victims via unknown vectors. This issue is related to the logout.php file. Recommendations For...

CVE-2011-5223: Improper Neutralization of Input During Web Page Generation

Cross-site request forgery CSRF vulnerability in logout.php in Cacti before 0.8.7i allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-1900

Cross-site request forgery CSRF vulnerability in admin/index.php in RazorCMS 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary web pages via a showcats action...

CVE-2012-4773: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information, as demonstrated by adding an administrator account via an add action to...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-4002: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2012-5129

Name of the Vulnerable Software and Affected Versions GLPI-PROJECT GLPI versions prior to 0.83.3 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of victims. The exact vectors used for the attack are not specified. Recommendations For versio...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in admin/function.php in IDevSpot iSupport 1.x allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via an administrators action...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in password.cgi in Sagem F@ST 2604 253180972B allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter...

CVE-2012-5320

Cross-site request forgery CSRF vulnerability in password.cgi in Sagem F@ST 2604 253180972B allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter...

CVE-2012-1416: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrator accounts via a membernew action to myadmin/admin1members.php or 2 modify the default site title via a save action...