Lucene search
+L

2216 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/12/16 12:00 a.m.•3 views

CVE-2009-4297: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...

6.8CVSS5.9AI score0.01219EPSS
SaveExploits0References2
Prion
Prion
•added 2009/12/01 2:30 a.m.•25 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Quick.Cart 3.4 allow remote attackers to hijack the authentication of the administrator for requests that 1 delete orders via an orders-delete action to admin.php, and possibly 2 delete products or 3 delete pages via unspecified vectors...

6.8CVSS7.8AI score0.00999EPSS
SaveExploits3References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/12/01 12:00 a.m.•8 views

CVE-2009-4121: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attackers to hijack the authentication of the administrator for requests that 1 delete web pages via a p-delete action to admin.php, and possibly 2 delete products or 3 delete orders via...

6.8CVSS5.9AI score0.00649EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/12/01 12:00 a.m.•8 views

CVE-2009-4120: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Quick.Cart 3.4 allow remote attackers to hijack the authentication of the administrator for requests that 1 delete orders via an orders-delete action to admin.php, and possibly 2 delete products or 3 delete pages via unspecified vectors...

6.8CVSS5.9AI score0.00999EPSS
SaveExploits3References2
Prion
Prion
•added 2009/11/25 10:00 p.m.•24 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that send arbitrary emails via unspecified vectors, a different vulnerability than CVE-2009-4076...

6.8CVSS7.3AI score0.01342EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve
•added 2009/11/25 10:00 p.m.•26 views

CVE-2009-4077

Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that send arbitrary emails via unspecified vectors, a different vulnerability than CVE-2009-4076...

6.8CVSS6AI score0.01342EPSS
SaveExploits0References1
OSV
OSV
•added 2009/11/25 10:00 p.m.•11 views

DEBIAN-CVE-2009-4077

Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that send arbitrary emails via unspecified vectors, a different vulnerability than CVE-2009-4076...

6.8CVSS7.4AI score0.01342EPSS
SaveExploits0References1
OSV
OSV
•added 2009/11/25 10:00 p.m.•40 views

DEBIAN-CVE-2009-4079

Cross-site request forgery CSRF vulnerability in Redmine 0.8.5 and earlier allows remote attackers to hijack the authentication of users for requests that delete a ticket via unspecified vectors...

6.8CVSS7.1AI score0.00719EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2009/11/25 9:22 p.m.•35 views

CVE-2009-4079

Cross-site request forgery CSRF vulnerability in Redmine 0.8.5 and earlier allows remote attackers to hijack the authentication of users for requests that delete a ticket via unspecified vectors...

7AI score0.00719EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/11/25 12:00 a.m.•5 views

CVE-2009-4077: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that send arbitrary emails via unspecified vectors, a different vulnerability than CVE-2009-4076...

6.8CVSS6AI score0.01342EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/11/25 12:00 a.m.•7 views

CVE-2009-4079: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Redmine 0.8.5 and earlier allows remote attackers to hijack the authentication of users for requests that delete a ticket via unspecified vectors...

6.8CVSS5.9AI score0.00719EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/11/25 12:00 a.m.•6 views

CVE-2009-4076: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that modify user information via unspecified vectors, a different vulnerability than CVE-2009-4077...

6.8CVSS5.9AI score0.01342EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/11/24 12:00 a.m.•6 views

CVE-2009-4066: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the "My Account" feature in PHPList Integration module 5 before 5.x-1.2 and 6 before 6.x-1.1 for Drupal allow remote attackers to hijack the authentication of arbitrary users via vectors related to 1 subscribing or 2 unsubscribing to...

6.8CVSS6.1AI score0.00722EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/11/16 12:00 a.m.•7 views

CVE-2009-2746: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the administrative console in the Security component in IBM WebSphere Application Server WAS 6.0.2 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 allows remote attackers to hijack the authentication of administrators via unspecified...

6.8CVSS5.9AI score0.00599EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/10/26 12:00 a.m.•9 views

CVE-2009-3785: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal, allow remote attackers to hijack the authentication of arbitrary users via unknown vectors...

6.8CVSS6AI score0.00629EPSS
SaveExploits0References2
Prion
Prion
•added 2009/10/09 2:30 p.m.•17 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Shared Sign-On 5.x and 6.x, a module for Drupal, allows remote attackers to hijack the authentication of arbitrary users via unknown vectors...

6.8CVSS7.7AI score0.00604EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2009/10/09 2:30 p.m.•27 views

CVE-2009-3656

Cross-site request forgery CSRF vulnerability in Shared Sign-On 5.x and 6.x, a module for Drupal, allows remote attackers to hijack the authentication of arbitrary users via unknown vectors...

6.8CVSS7.2AI score0.00604EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/10/09 12:00 a.m.•6 views

CVE-2009-3656: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Shared Sign-On 5.x and 6.x, a module for Drupal, allows remote attackers to hijack the authentication of arbitrary users via unknown vectors...

6.8CVSS6AI score0.00604EPSS
SaveExploits0References2
Prion
Prion
•added 2009/09/18 8:30 p.m.•27 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the RSS module in vtiger CRM 5.0.4 allows remote attackers to hijack the authentication of Admin users for requests that modify the news feed system via the rssurl parameter in a Save action to index.php...

6.8CVSS7.6AI score0.01258EPSS
SaveExploits2References8Affected Software1
NVD
NVD
•added 2009/09/18 8:30 p.m.•40 views

CVE-2009-3248

Cross-site request forgery CSRF vulnerability in the RSS module in vtiger CRM 5.0.4 allows remote attackers to hijack the authentication of Admin users for requests that modify the news feed system via the rssurl parameter in a Save action to index.php...

6.8CVSS7.1AI score0.01258EPSS
SaveExploits2References8
Rows per page
Query Builder