1023 matches found
CVE-2016-4854
Cross-site request forgery CSRF vulnerability in L-04D firmware version V10a and V10b allows remote attackers to hijack the authentication of administrators to perform arbitrary operations via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackers to hijack the authentication of a user to perform unintended operations via unspecified vectors...
CVE-2016-4904
CVE-2016-4904 affects WP-OliveCart and WP-OliveCartPro prior to 3.1.3/3.1.8. The issue is a Cross-site Request Forgery (CSRF) vulnerability that can allow an attacker to hijack a user’s authenticated session to perform unintended operations via unspecified vectors. Affected versions expose users ...
CVE-2016-4884
Cross-site request forgery CSRF vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2016-4879
Cross-site request forgery CSRF vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that 1 delete email campaigns or 2 delete contacts...
CVE-2017-2102
Cross-site request forgery CSRF vulnerability in Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2017-2097
Cross-site request forgery CSRF vulnerability in Knowledge versions prior to v1.7.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors...
TeamPass Cross-Site Request Forgery Vulnerability
TeamPass is a dedicated password manager for Apache, MySQL and PHP. A cross-site request forgery vulnerability exists in TeamPass 2.1.24 and earlier versions. A remote attacker can exploit this vulnerability to hijack authentication and perform unauthorized operations...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Red Hat JBoss BRMS and BPMS 6 allows remote attackers to hijack the authentication of users for requests that modify instances via a crafted web page...
CVE-2016-5401
Cross-site request forgery CSRF vulnerability in Red Hat JBoss BRMS and BPMS 6 allows remote attackers to hijack the authentication of users for requests that modify instances via a crafted web page...
CVE-2015-7563
Cross-site request forgery CSRF vulnerability in TeamPass 2.1.24 and earlier allows remote attackers to hijack the authentication of an authenticated user...
UBUNTU-CVE-2016-10206
Cross-site request forgery CSRF vulnerability in Zoneminder 1.30 and earlier allows remote attackers to hijack the authentication of users for requests that change passwords and possibly have unspecified other impact as demonstrated by a crafted user action request to index.php...
CVE-2016-10206
Cross-site request forgery CSRF vulnerability in Zoneminder 1.30 and earlier allows remote attackers to hijack the authentication of users for requests that change passwords and possibly have unspecified other impact as demonstrated by a crafted user action request to index.php...
CVE-2016-5372
Cross-site request forgery CSRF vulnerability in NetApp Snap Creator Framework before 4.3.0P1 allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Grails console aka Grails Debug Console and Grails Web Console 2.0.7, 1.5.10, and earlier allows remote attackers to hijack the authentication of users for requests that execute arbitrary Groovy code via unspecified vectors...