CVE-2013-7259

Multiple cross-site request forgery CSRF vulnerabilities in Neo4J 1.9.2 allow remote attackers to hijack the authentication of administrators for requests that execute arbitrary code, as demonstrated by a request to 1 db/data/ext/GremlinPlugin/graphdb/executescript or 2 db/manage/server/console/...

PT-2014-3312

Name of the Vulnerable Software and Affected Versions Neo4J version 1.9.2 Description The issue allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary code. This can be achieved through requests to API endpoints such as...

CVE-2013-7259: Improper Neutralization of Special Elements used in an OS Command

Multiple cross-site request forgery CSRF vulnerabilities in Neo4J 1.9.2 allow remote attackers to hijack the authentication of administrators for requests that execute arbitrary code, as demonstrated by a request to 1 db/data/ext/GremlinPlugin/graphdb/executescript or 2 db/manage/server/console/...