CVE-2012-0453: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in xmlrpc.cgi in Bugzilla 4.0.2 through 4.0.4 and 4.1.1 through 4.2rc2, when modperl is used, allows remote attackers to hijack the authentication of arbitrary users for requests that modify the product's installation via the XML-RPC API...

PT-2012-2574

Name of the Vulnerable Software and Affected Versions Bugzilla versions 4.0.2 through 4.0.4 Bugzilla versions 4.1.1 through 4.2rc2 Description A cross-site request forgery issue affects the xmlrpc.cgi component in Bugzilla when mod perl is used. This allows remote attackers to hijack the...

CVE-2012-0997

Cross-site request forgery CSRF vulnerability in admin/index.php in 11in1 1.2.1 stable 12-31-2011 allows remote attackers to hijack the authentication of administrators for requests that add new topics via an addTopic action...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-1235: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0235...

CVE-2012-0235: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-1220: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in modules/config/adminutente.php in GAzie 5.20 and earlier allows remote attackers to hijack the authentication of administrators for requests that change account information via an update action, as demonstrated by changing the password...

PT-2012-3150

Name of the Vulnerable Software and Affected Versions pluck version 4.7 Description The issue allows remote attackers to hijack the authentication of admins for various requests, including modifying the admin email address, modifying the blog title via a settings action, adding a page via an...

CVE-2012-0997: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in admin/index.php in 11in1 1.2.1 stable 12-31-2011 allows remote attackers to hijack the authentication of administrators for requests that add new topics via an addTopic action...

CVE-2012-1216: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in admin.php in PBBoard 2.1.4 allow remote attackers to hijack the authentication of administrators for requests that 1 upload a file via an add action or 2 change the contents of a file via a dit action...

PT-2012-3002

Name of the Vulnerable Software and Affected Versions 11in1 version 1.2.1 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that add new topics via an "addTopic" action. Recommendations For version 1.2.1, as a...

Cross site request forgery (csrf)

The cross-site request forgery CSRF protection mechanism in e107 before 0.7.23 uses a predictable random token based on the creation date of the administrator account, which allows remote attackers to hijack the authentication of administrators for requests that add new users via...

CVE-2012-0829

Multiple cross-site request forgery CSRF vulnerabilities in Mibew Messenger 1.6.4 and earlier allow remote attackers to hijack the authentication of operators for requests that insert cross-site scripting XSS sequences via the 1 address or 2 threadid parameters to operator/ban.php; or 3...

CVE-2010-5085: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in admin/updateuser in Hulihan Amethyst 0.1.5, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that 1 change the administrative password or 2 change the site's configuration...

CVE-2012-1083: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Terminal PHP Shell terminal extension 0.3.2 and earlier for TYPO3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-1058: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an admin.newuser action to index.php...

CVE-2010-5084: Cross-Site Request Forgery (CSRF)

The cross-site request forgery CSRF protection mechanism in e107 before 0.7.23 uses a predictable random token based on the creation date of the administrator account, which allows remote attackers to hijack the authentication of administrators for requests that add new users via...

CVE-2012-0990: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in admin/settings/update in DClassifieds 0.1 final allows remote attackers to hijack the authentication of administrators for requests that modify account settings such as the administrator password or email via certain Settings parameters...

CVE-2012-0314

Multiple cross-site request forgery CSRF vulnerabilities on the eAccess Pocket WiFi aka GP02 router before 2.00 with firmware 11.203.11.05.168 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 initialize settings or 2 reboot the device...

CVE-2012-0440

Cross-site request forgery CSRF vulnerability in jsonrpc.cgi in Bugzilla 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.x before 4.0.4, and 4.1.x and 4.2.x before 4.2rc2 allows remote attackers to hijack the authentication of arbitrary users for requests that use the JSON-RPC API...