CVE-2016-4506

Cross-site request forgery CSRF vulnerability on Resource Data Management RDM Intuitive 650 TDB Controller devices before 2.1.24 allows remote authenticated users to hijack the authentication of arbitrary users...

CVE-2016-3168

The System module in Drupal 6.x before 6.38 and 7.x before 7.43 might allow remote attackers to hijack the authentication of site administrators for requests that download and run files with arbitrary JSON-encoded content, aka a "reflected file download vulnerability."...

CVE-2016-1174

Cross-site request forgery CSRF vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators...

CVE-2016-1172

Cross-site request forgery CSRF vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators...

CVE-2016-1170

Cross-site request forgery CSRF vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to hijack the authentication of administrators...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to hijack the authentication of administrators...

CVE-2016-1168

Cross-site request forgery CSRF vulnerability on NEC Aterm WF800HP devices with firmware 1.0.17 and earlier allows remote attackers to hijack the authentication of arbitrary users...

CVE-2016-1167

Cross-site request forgery CSRF vulnerability on NEC Aterm WG300HP devices allows remote attackers to hijack the authentication of arbitrary users...

CVE-2016-1167

The CVE-2016-1167 issue affects the NEC Aterm WG300HP wireless router. A cross-site request forgery (CSRF) vulnerability could allow an attacker to hijack the authentication of an authenticated user. Affected component: the device’s management interface (web UI); root cause is CSRF (CWE-352) enab...

CVE-2015-8152

Cross-site request forgery CSRF vulnerability in Symantec Endpoint Protection Manager SEPM 12.1 before RU6-MP4 allows remote authenticated users to hijack the authentication of administrators for requests that execute arbitrary code by adding lines to a logging script...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in admin/registration/register.php in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote attackers to hijack the authentication of administrators for requests that send statistics to an arbitrary hub U...

CVE-2015-5338

CVE-2015-5338 affects Moodle’s lesson module, enabling CSRF that can hijack user authentication for requests to mod/lesson/mediafile.php or mod/lesson/view.php. Impacted versions are Moodle up to 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3. The connected sources confir...

CVE-2015-5335

CVE-2015-5335 affects Moodle versions 2.6.11 and earlier, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3. It is a Cross-site request forgery (CSRF) vulnerability in admin/registration/register.php that can allow remote attackers to hijack the authentication of administrators for ...

CVE-2016-1151

Multiple cross-site request forgery CSRF vulnerabilities in Cybozu Office 9.9.0 through 10.3.0 allow remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Adobe Connect before 9.5.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2016-0948

Cross-site request forgery CSRF vulnerability in Adobe Connect before 9.5.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2016-2049

examples/consumer/common.php in JanRain PHP OpenID library aka php-openid improperly checks the openid.realm parameter against the SERVERNAME element in the SERVER superglobal array, which might allow remote attackers to hijack the authentication of arbitrary users via vectors involving a crafted...

CVE-2016-1139

Cross-site request forgery CSRF vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2016-1134

Cross-site request forgery CSRF vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and earlier, WHR-1166DHP devices with firmware 1.90 and earlier, WHR-300HP2 devices with firmware 1.90 and earlier, WHR-600D devices with firmware 1.90 and...

Advantech WebAccess Cross-Site Request Forgery Vulnerability

WebAccess HMI/SCADA software provides remote control and management, allowing users to easily view and configure automation devices in facility management systems, power stations and building automation systems. A cross-site request forgery vulnerability exists in Advantech WebAccess versions pri...