Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Admin tools module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors involving "not checking tokens."...

CVE-2012-2056

Cross-site request forgery CSRF vulnerability in the Content Lock module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database CCMDB, allows remote attackers to...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to hijack the authentication of unspecified victims for requests that upload files...

CVE-2012-1578

CVE-2012-1578 affects MediaWiki 1.17.x (before 1.17.3) and 1.18.x (before 1.18.2). The root cause is multiple CSRF vulnerabilities that allow remote attackers to hijack authentication of users with block permission for requests to Block (block a user) or Unblock (unblock a user). Impact is hijack...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP Business Availability Center BAC 8.07 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-3256

Cross-site request forgery CSRF vulnerability in HP Business Availability Center BAC 8.07 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-2069

Cross-site request forgery CSRF vulnerability in the Wishlist module 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.6 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting XSS sequences via the 1 wlreveal or 2 q parameter...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in core/ajax/appconfig.php in ownCloud before 4.0.7 allows remote attackers to hijack the authentication of administrators for requests that edit the app configurations...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in ownCloud before 4.0.5 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-4753

Multiple cross-site request forgery CSRF vulnerabilities in ownCloud before 4.0.5 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the AdminUsers component in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to hijack the authentication of administrators for requests that remove arbitrary user accounts via a delete operation, as demonstrated by an image action...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in accessaccount.cgi in ZTE ZXDSL 831IIV7.5.0aZ29OV allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter...

CVE-2012-4746

The CVE-2012-4746 issue affects ZTE ZXDSL 831IIV7.5.0a_Z29_OV, specifically a CSRF in accessaccount.cgi that lets remote attackers hijack administrator authentication to change the admin password via the sysPassword parameter. The NVD entry lists a Network attack vector with no authentication and...

CVE-2011-5131

Cross-site request forgery CSRF vulnerability in global.php in MyBB before 1.6.5 allows remote attackers to hijack the authentication of a user for requests that change the user's language via the language parameter...

CVE-2012-3309

Cross-site request forgery CSRF vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering aka csrfstatus feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accoun...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Symantec Messaging Gateway SMG before 10.0 allows remote attackers to hijack the authentication of administrators...

CVE-2012-0308

Cross-site request forgery CSRF vulnerability in Symantec Messaging Gateway SMG before 10.0 allows remote attackers to hijack the authentication of administrators...

CVE-2012-0308

Summary (CVE-2012-0308): Symantec Messaging Gateway (SMG) prior to version 10.0 is vulnerable to a Cross-Site Request Forgery (CSRF) that can hijack the authentication of administrators. The issue stems from insufficient input validation, enabling a remote attacker to entice a logged-in admin to ...

CVE-2010-5087

SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 allows remote attackers to bypass the cross-site request forgery CSRF protection mechanism and hijack the authentication of administrators via vectors related to "form action requests" using a controller...