PT-2011-3289

Name of the Vulnerable Software and Affected Versions phpList versions 2.10.13 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for requests, including creating a list or inserting cross-site scripting XSS sequences. This is due to an...

PT-2011-2606

Name of the Vulnerable Software and Affected Versions phpList versions prior to 2.10.13 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of administrators for requests that add or edi...

PT-2011-3275

Name of the Vulnerable Software and Affected Versions Drupal Translation Management module versions prior to 6.x-1.21 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of victims via unknown vectors. Recommendations For versions pri...

CVE-2011-1664: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Translation Management module 6.x before 6.x-1.21 for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-0440

Cross-site request forgery CSRF vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that delete blogs...

CVE-2011-0440: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that delete blogs...

CVE-2011-0760: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the configuration screen in wp-relatedposts.php in the WP Related Posts plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the 1...

PT-2011-2343

Name of the Vulnerable Software and Affected Versions Mahara versions 1.2.x through 1.2.6 Mahara versions 1.3.x through 1.3.3 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users for requests that delete blogs. Recommendations For...

CVE-2011-0059: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to hijack the authentication of arbitrary users for requests that were initiated by a plugin and received a 307 redirect to a page on a...

PT-2011-2053

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.5.17 Mozilla Firefox versions 3.6.x prior to 3.6.14 SeaMonkey versions prior to 2.0.12 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary...

PT-2011-1700

Name of the Vulnerable Software and Affected Versions BLOG:CMS versions 4.2.1.e and earlier Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of administrators. This occurs in the admin/libs/ADMIN.php file. Recommendations For...

PT-2011-2869

Name of the Vulnerable Software and Affected Versions Mutare EVM affected versions not specified Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of arbitrary users for specific...

CVE-2011-1104: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Mutare EVM allow remote attackers to hijack the authentication of arbitrary users for requests that 1 change a PIN, 2 delete messages, 3 add a delivery address, or 4 change a delivery address...

CVE-2011-0277: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in HP Power Manager HPPM 4.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts...

CVE-2011-0046

Multiple cross-site request forgery CSRF vulnerabilities in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 allow remote attackers to hijack the authentication of arbitrary users for requests related to 1 adding a saved search in buglist.cgi, 2 voting in...

PT-2011-2042

Name of the Vulnerable Software and Affected Versions Bugzilla versions prior to 3.2.10 Bugzilla versions 3.4.x prior to 3.4.10 Bugzilla versions 3.6.x prior to 3.6.4 Bugzilla versions 4.0.x prior to 4.0rc2 Description The issue allows remote attackers to hijack the authentication of arbitrary...

CVE-2011-0046: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 allow remote attackers to hijack the authentication of arbitrary users for requests related to 1 adding a saved search in buglist.cgi, 2 voting in...

CVE-2011-0643

Cross-site request forgery CSRF vulnerability in admin/confusersedit.php in PHP Link Directory phpLD 4.1.0 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via the N action...

CVE-2011-0642: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in news/admin.php in N-13 News 3.4, 3.7, and 4.0 allows remote attackers to hijack the authentication of administrators for requests that create new users via the options action. NOTE: some of these details are obtained from third party information...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in VaM Shop 1.6, 1.6.1, and probably earlier versions allows remote attackers to hijack the authentication of administrators for requests that 1 change user status via admin/customers.php or 2 change user permissions via admin/accounting.php. NOTE: so...