942 matches found
CVE-2017-2138: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier excluding v2 and v3, CS-Cart Multivendor Japanese Edition v4.3.10 and earlier excluding v2 and v3 allows remote attackers to hijack the authentication of administrators via unspecified vectors...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the Podcast feature in Subsonic 6.1.1 allow remote attackers to hijack the authentication of users for requests that 1 subscribe to a podcast via the add parameter to podcastReceiverAdmin.view or 2 update Internet Radio Settings via the...
PT-2017-15313
Name of the Vulnerable Software and Affected Versions WMR-433 firmware versions 1.02 and earlier WMR-433W firmware versions 1.40 and earlier Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators. The attack vector is not specified...
CVE-2017-1000008
Chyrp Lite version 2016.04 is vulnerable to a CSRF in the user settings function allowing attackers to hijack the authentication of logged in users to modify account information, including their password...
CVE-2017-1000008
Chyrp Lite version 2016.04 is vulnerable to a CSRF in the user settings function allowing attackers to hijack the authentication of logged in users to modify account information, including their password...
PT-2017-15272
Name of the Vulnerable Software and Affected Versions TS-WPTCAM versions 1.19 and earlier TS-PTCAM versions 1.19 and earlier TS-PTCAM/POE versions 1.19 and earlier TS-WLC2 versions 1.19 and earlier TS-WLCE versions 1.19 and earlier TS-WRLC versions 1.19 and earlier TS-WPTCAM2 versions 1.01 and...
CVE-2017-10680
Cross-site request forgery CSRF vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to change a private album to public via a crafted request...
CVE-2017-10680
Cross-site request forgery CSRF vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to change a private album to public via a crafted request...
CVE-2017-10681
Cross-site request forgery CSRF vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to unlock albums via a crafted request...
CVE-2017-10678
Cross-site request forgery CSRF vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to delete permalinks via a crafted request...
CVE-2017-6086
Multiple cross-site request forgery CSRF vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.15 allow remote attackers to hijack the authentication of logged administrators to 1 add an administrator user via a crafted POST request to...
CVE-2016-4909
Cross-site request forgery CSRF vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to hijack the authentication of a logged in user to force a logout via unspecified vectors...
CVE-2016-7809
The CVE-2016-7809 entry concerns a CSRF vulnerability in Corega CG-WLR300NX firmware versions 1.20 and earlier. Affected product: CG-WLR300NX (wireless router). Vulnerable component: the firmware’s authentication handling allows an attacker to hijack a logged-in user’s session to perform unintend...
PT-2017-8604
Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.2.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of a logged-in user, forcing a logout via unspecified vectors. Recommendations For Cybozu Garoo...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in L-04D firmware version V10a and V10b allows remote attackers to hijack the authentication of administrators to perform arbitrary operations via unspecified vectors...
PT-2017-8599
Name of the Vulnerable Software and Affected Versions WP-OliveCart versions prior to 3.1.3 WP-OliveCartPro versions prior to 3.1.8 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of a user to perform unintended operations. Recommendations F...
CVE-2016-4879
Cross-site request forgery CSRF vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in baserCMS plugin Uploader version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...