CVE-2013-0185

Cross-site request forgery CSRF vulnerability in ManageIQ Enterprise Virtualization Manager EVM allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors...

CVE-2013-0185

CVE-2013-0185 refers to a cross-site request forgery in Red Hat ManageIQ Enterprise Virtualization Manager (EVM) . The connected CNVD entry confirms a CSRF vulnerability that could allow a remote attacker to hijack user authentication for requests, with the impact described as unspecified and the...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in WP Security Audit Log plugin before 1.2.5 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2018-8814

Cross-site request forgery CSRF vulnerability in WolfCMS 0.8.3.1 allows remote attackers to hijack the authentication of users for requests that modify plugin/pluginname/settings by crafting a malicious request...

PT-2018-18638

Name of the Vulnerable Software and Affected Versions WolfCMS version 0.8.3.1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests that modify plugin settings by crafting a malicious request. This can be done by exploiting the...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in inc/AdminPage.php in the WP HTML Sitemap plugin 1.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete the sitemap via a request to the wp-html-sitemap page in wp-admin/options-general.php...

CVE-2014-2274

Cross-site request forgery CSRF vulnerability in the Subscribe To Comments Reloaded plugin before 140219 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via a request to the...

CVE-2014-2675

Cross-site request forgery CSRF vulnerability in inc/AdminPage.php in the WP HTML Sitemap plugin 1.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete the sitemap via a request to the wp-html-sitemap page in wp-admin/options-general.php...

PT-2018-4206

Name of the Vulnerable Software and Affected Versions WP HTML Sitemap plugin version 1.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that delete the sitemap via a request to the "wp-html-sitemap" page in...

CVE-2014-2550: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Disable Comments plugin before 1.0.4 for WordPress allows remote attackers to hijack the authentication of administrators for requests that enable comments via a request to the disablecommentssettings page to wp-admin/options-general.php...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the administration panel in Piwigo before 2.6.2 allows remote attackers to hijack the authentication of administrators for requests that add users via a pwg.users.add action in a request to ws.php...

PT-2018-4223

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.6.2 Description A cross-site request forgery CSRF issue exists in the administration panel, allowing remote attackers to hijack the authentication of administrators. This can be done by sending a request to "ws.php"...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in FS010W firmware FS010W00V1.3.0 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors...

CVE-2018-0520

Cross-site request forgery CSRF vulnerability in FS010W firmware FS010W00V1.3.0 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors...

CVE-2016-0348

Cross-site request forgery CSRF vulnerability in IBM TRIRIGA Application Platform 3.3, 3.3.1, 3.3.2, and 3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. IBM X-Force ID: 111813...

CVE-2018-7216

Cross-site request forgery CSRF vulnerability in esop/toolkit/profile/regData.do in Bravo Tejari Procurement Portal allows remote authenticated users to hijack the authentication of application users for requests that modify their personal data by leveraging lack of anti-CSRF tokens...

CVE-2018-0509

Cross-site request forgery CSRF vulnerability in epg search result viewer kkcald 0.7.21 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors...

CVE-2018-5720: Cross-Site Request Forgery (CSRF)

An issue was discovered on DODOCOOL DC38 3-in-1 N300 Mini Wireless Range Extend RTN2-AW.GD.R3465.1.20161103 devices. A Cross-site request forgery CSRF vulnerability allows remote attackers to hijack the authentication of users for requests that modify all the settings. This vulnerability can lead...

CVE-2012-0699

Multiple cross-site request forgery CSRF vulnerabilities in Family Connections CMS aka FCMS 2.9 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that 1 add news via an add action to familynews.php or 2 add a prayer via an add action to prayers.php...

CVE-2014-0120

Cross-site request forgery CSRF vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arbitrary users for requests that run commands on the Karaf server, as demonstrated by running "shutdown -f."...