CVE-2013-6826

cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate the csrftoken parameter, which allows remote attackers to perform cross-site request forgery CSRF attacks...

Cross site request forgery (csrf)

cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate the csrftoken parameter, which allows remote attackers to perform cross-site request forgery CSRF attacks...

CVE-2013-6826

Fortinet FortiAnalyzer (pre-5.0.5) is affected by CVE-2013-6826 due to improper validation of the csrf_token parameter, enabling cross-site request forgery via multiple web UI scripts. The underlying issue is lack of CSRF protection in SYSAdminUserDialog paths, leading to potential session hijack...

CVE-2013-6826

cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate the csrftoken parameter, which allows remote attackers to perform cross-site request forgery CSRF attacks...

FortiAnalyzer 5.0.4 - CSRF Vulnerability

Exploit for php platform in category web applications CertR no respond my email, not Fortinet has not given the credits. I. VULNERABILITY ------------------------- CSRF vulnerabilities in OS of fortianalyzer 5.0.4 II. BACKGROUND ------------------------- Fortinet’s industry-leading, Network...

Fortianalyzer VM / Appliance 5.0.4 Cross Site Request Forgery

CertR no respond my email, not Fortinet has not given the credits. I. VULNERABILITY ------------------------- CSRF vulnerabilities in OS of fortianalyzer 5.0.4 II. BACKGROUND ------------------------- Fortinet’s industry-leading, Network Security Platforms deliver Next Generation Firewall NGFW...

Fortinet FortiAnalyzer - Cross-Site Request Forgery

Fortinet FortiAnalyzer - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/63663/info FortiAnalyzer is prone to a cross-site request-forgery vulnerability because it fails to properly validate HTTP requests. Exploiting this issue may allow a remote attacker to perform certain...

Fortinet FortiAnalyzer - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/63663/info FortiAnalyzer is prone to a cross-site request-forgery vulnerability because it fails to properly validate HTTP requests. Exploiting this issue may allow a remote attacker to perform certain unauthorized administrative actions in the context of...

FortiAnalyzer Appliance - Multiple Web Vulnerabilities

Document Title: =============== FortiAnalyzer Appliance - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=145 Release Date: ============= 2011-09-11 Vulnerability Laboratory ID VL-ID: ==================================== 145...

FortiAnalyzer Appliance - Multiple Web Vulnerabilities

Document Title: =============== FortiAnalyzer Appliance - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=145 Release Date: ============= 2011-09-11 Vulnerability Laboratory ID VL-ID: ==================================== 145...