CVE-2012-1901

Multiple cross-site request forgery CSRF vulnerabilities in FlexCMS 3.2.1 and earlier allow remote attackers to 1 hijack the authentication of users for requests that change account settings via a request to index.php/profile-edit-save or 2 hijack the authentication of administrators for requests...

CVE-2012-3028: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to hijack the authentication of arbitrary users for requests that modify data or cause a denial of service...

CVE-2012-1901: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in FlexCMS 3.2.1 and earlier allow remote attackers to 1 hijack the authentication of users for requests that change account settings via a request to index.php/profile-edit-save or 2 hijack the authentication of administrators for requests...

PT-2012-3639

Name of the Vulnerable Software and Affected Versions FlexCMS versions 3.2.1 and earlier Description The issue allows remote attackers to hijack user authentication for requests that change account settings via a request to "index.php/profile-edit-save" or hijack administrator authentication for...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Admin tools module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors involving "not checking tokens."...

CVE-2012-2056

Cross-site request forgery CSRF vulnerability in the Content Lock module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-2057: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Ubercart Bulk Stock Updater module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors related to formAPI...

CVE-2012-2061: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Admin tools module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors involving "not checking tokens."...

CVE-2012-2056: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Content Lock module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-3908: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the ISE Administrator user interface aka the Apache Tomcat interface on Cisco Identity Services Engine ISE 3300 series appliances before 1.1.0.665 Cumulative Patch 1 allow remote attackers to hijack the authentication of administrators,...

PT-2012-3914

Name of the Vulnerable Software and Affected Versions TestLink versions 1.9.3 and earlier Description The issue allows remote attackers to hijack the authentication of users for requests that add, delete, or modify sensitive information. This can be demonstrated by changing the administrator's...

CVE-2012-2275: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in TestLink 1.9.3 and earlier allow remote attackers to hijack the authentication of users for requests that add, delete, or modify sensitive information, as demonstrated by changing the administrator's email via an editUser action to...

CVE-2012-4893: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in file/show.cgi in Webmin 1.590 and earlier allow remote attackers to hijack the authentication of privileged users for requests that 1 read files or execute 2 tar, 3 zip, or 4 gzip commands, a different issue than CVE-2012-2982...

PT-2012-5642

Name of the Vulnerable Software and Affected Versions Webmin versions 1.590 and earlier Description The issue allows remote attackers to hijack the authentication of privileged users for requests, enabling them to read files or execute tar, zip, or gzip commands. Recommendations For Webmin versio...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database CCMDB, allows remote attackers to...

CVE-2012-0714: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database CCMDB, allows remote attackers to...

PT-2012-2809

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 6.2 through 7.5 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of victims via unknown vectors. This affects products used in SmartCloud Control Desk...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to hijack the authentication of unspecified victims for requests that upload files...

CVE-2012-1580

Cross-site request forgery CSRF vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to hijack the authentication of unspecified victims for requests that upload files...

CVE-2012-1578

CVE-2012-1578 affects MediaWiki 1.17.x (before 1.17.3) and 1.18.x (before 1.18.2). The root cause is multiple CSRF vulnerabilities that allow remote attackers to hijack authentication of users with block permission for requests to Block (block a user) or Unblock (unblock a user). Impact is hijack...