Lucene search
+L

2216 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/27 12:00 a.m.•6 views

CVE-2008-6331: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Streber before 0.08093 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...

6CVSS5.9AI score0.00484EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/23 12:00 a.m.•6 views

CVE-2009-0708: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in SemanticScuttle before 0.91 allow remote attackers to 1 hijack the authentication of administrators via unknown vectors or 2 hijack the authentication of arbitrary users via vectors involving the profile page...

6.8CVSS6AI score0.00524EPSS
SaveExploits0References2
Prion
Prion
•added 2009/02/19 4:30 p.m.•17 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the manageusers handler in admin/index.php in Falt4 CMS aka Falt4 Extreme RC4 allow remote attackers to hijack the authentication of administrators for requests that change passwords via the 1 edit and 2 editnow actions...

6.8CVSS7.8AI score0.0063EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/06 12:00 a.m.•8 views

CVE-2009-0468: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allow remote attackers to hijack the authentication of administrators for requests that 1 shutdown the server, 2 send ping packets, 3 enable network services, 4 configure a...

6.8CVSS5.8AI score0.00966EPSS
SaveExploits2References2
Prion
Prion
•added 2009/02/04 3:30 p.m.•22 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in TangoCMS before 2.2.0 allow remote attackers to hijack the authentication of administrators...

6CVSS7.5AI score0.00479EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/04 12:00 a.m.•8 views

CVE-2008-6048: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in TangoCMS before 2.2.0 allow remote attackers to hijack the authentication of administrators...

6CVSS5.9AI score0.00479EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/03 12:00 a.m.•6 views

CVE-2009-0408: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in osCommerce 2.2 RC 2a allows remote attackers to hijack the authentication of administrators...

6CVSS5.9AI score0.00678EPSS
SaveExploits1References2
NVD
NVD
•added 2009/01/22 11:30 p.m.•29 views

CVE-2009-0256

Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hijack web sessions via unspecified vectors related to 1 frontend and 2 backend authentication...

7.5CVSS7.5AI score0.01793EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/12/18 12:00 a.m.•5 views

CVE-2008-5672: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in PHParanoid before 0.4 allow remote attackers to hijack the authentication of arbitrary users for requests that use 1 admin.php or 2 private messages...

6.8CVSS6AI score0.00574EPSS
SaveExploits0References2
NVD
NVD
•added 2008/11/18 12:30 a.m.•36 views

CVE-2008-5115

Cross-site request forgery CSRF vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to hijack the authentication of administrators for requests that update the password via idm/admin/changeself.jsp...

6.8CVSS7.3AI score0.03144EPSS
SaveExploits2References9
Prion
Prion
•added 2008/11/03 7:36 p.m.•31 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Interact 2.4.1 allows remote attackers to hijack the authentication of super administrators for requests that create super administrator accounts...

6.8CVSS7.6AI score0.00599EPSS
SaveExploits0References5Affected Software1
Prion
Prion
•added 2008/09/02 3:41 p.m.•21 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Blogn BURO GUN 1.9.7 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make content modifications. NOTE: some of these details are obtained from third party information...

6.8CVSS7.7AI score0.00581EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/09/02 12:00 a.m.•7 views

CVE-2008-3885: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Blogn BURO GUN 1.9.7 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make content modifications. NOTE: some of these details are obtained from third party information...

6.8CVSS6.1AI score0.00581EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/08/27 12:00 a.m.•9 views

CVE-2008-3736: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in 1 System Consultants La!Cooda WIZ 1.4.0 and earlier and 2 SpaceTag LacoodaST 2.1.3 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that a change passwords or b change configurations...

6CVSS6AI score0.00559EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/08/21 12:00 a.m.•5 views

CVE-2008-3760: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the sign-out page in Vanilla 1.1.4 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a logout via a SignOutNow action to people.php...

4.3CVSS6AI score0.00726EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/07/31 12:00 a.m.•9 views

CVE-2008-3421: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Blackboard Academic Suite 8.0.260.7 allow remote attackers to hijack the authentication of student users for requests that change configuration and enrollments via unspecified input to 1 updatemodule.jsp, 2 enrollcourse.pl, and 3...

4.3CVSS5.8AI score0.0053EPSS
SaveExploits0References2
Rows per page
Query Builder