CVE-2015-5996

Cross-site request forgery CSRF vulnerability on Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in advpwdcgi in the web management interface on Arris DG860A, TG862A, and TG862G devices with firmware TS0703128100611 through TS0705125D031115 allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Janitza UMG 508, 509, 511, 604, and 605 devices allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code...

CVE-2015-2026

Cross-site request forgery CSRF vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2015-5075

Cross-site request forgery CSRF vulnerability in X2Engine X2CRM before 5.2 allows remote attackers to hijack the authentication of administrators for requests that create an administrative account via a crafted request to index.php/users/create...

CVE-2015-6468

Cross-site request forgery CSRF vulnerability in Resource Data Management Data Manager before 2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Resource Data Management Data Manager before 2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-5991

Cross-site request forgery CSRF vulnerability in form2WlanSetup.cgi on Philippine Long Distance Telephone PLDT SpeedSurf 504AN devices with firmware GAN9.8U26-4-TX-R6B018-PH.EN and Kasda KW58293 devices allows remote attackers to hijack the authentication of administrators for requests that perfo...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-6827

Cross-site request forgery CSRF vulnerability in Auto-Exchanger 5.1.0 allows remote attackers to hijack the authentication of users for requests that change a password via a request to signup.php...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a saveWorkerPeek action...

HP Version Control Repository Manager Cross-Site Request Forgery Vulnerability

HP Version Control Repository Manager is a set of version control repository management products from Hewlett-Packard HP. A cross-site request forgery vulnerability exists in HP Version Control Repository Manager versions prior to 7.5.0. It allows an authenticated remote user to hijack the...

CVE-2015-5412

Cross-site request forgery CSRF vulnerability in HP Version Control Repository Manager VCRM before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-6262

CVE-2015-6262 describes a cross-site request forgery vulnerability in Cisco Prime Infrastructure (versions 1.2(0.103) and 2.0(0.0)) that could allow remote attackers to hijack a user’s session. Root cause: insufficient CSRF protections in the web interface. Exploitation involves luring a user to ...

Actiontec GT784WN Modem Cross-Site Request Forgery Vulnerability

The Actiontec GT784WN is a DSL Digital Subscriber Line modem router from Actiontec USA. A cross-site request forgery vulnerability exists in Actiontec GT784WN modems using firmware versions prior to NCS01-1.0.13. A remote attacker could exploit the vulnerability to hijack authentication or hijack...

CVE-2015-6523

The CVE-2015-6523 entry concerns the WordPress Portfolio plugin prior to version 1.05, where a Cross-Site Request Forgery (CSRF) flaw in the instagram-portfolio page of wp-admin/options-general.php allows remote attackers to hijack administrator authentication. The vulnerability arises from the p...

CVE-2015-6517

Cross-site request forgery CSRF vulnerability in phpLiteAdmin 1.1 allows remote attackers to hijack the authentication of users for requests that drop database tables via the droptable parameter to phpliteadmin.php...

TP-LINK WR1043N Multiple Cross-Site Request Forgery (CVE-2013-2645)

Multiple cross-site request forgery CSRF vulnerabilities on the TP-LINK WR1043N router with firmware TL-WR1043NDV1120405 allow remote attackers to hijack the authentication of administrators for requests...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in SecuritySetting/UserSecurity/UserManagement.aspx in B.A.S C2Box before 4.0.0 r19171 allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via certain vectors...