CVE-2015-6545: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a saveWorkerPeek action...

CVE-2014-2330

Multiple cross-site request forgery CSRF vulnerabilities in the Multisite GUI in CheckMK before 1.2.5i2 allow remote attackers to hijack the authentication of users for requests that 1 upload arbitrary snapshots, 2 delete arbitrary files, or possibly have other unspecified impact via unknown...

PT-2015-3705

Name of the Vulnerable Software and Affected Versions Check MK versions prior to 1.2.5i2 Description The issue affects the Multisite GUI in Check MK, where multiple cross-site request forgery CSRF vulnerabilities exist. These vulnerabilities allow remote attackers to hijack the authentication of...

HP Version Control Repository Manager Cross-Site Request Forgery Vulnerability

HP Version Control Repository Manager is a set of version control repository management products from Hewlett-Packard HP. A cross-site request forgery vulnerability exists in HP Version Control Repository Manager versions prior to 7.5.0. It allows an authenticated remote user to hijack the...

CVE-2015-5412

Cross-site request forgery CSRF vulnerability in HP Version Control Repository Manager VCRM before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

PT-2015-6891

Name of the Vulnerable Software and Affected Versions HP Version Control Repository Manager VCRM versions prior to 7.5.0 Description A cross-site request forgery CSRF issue allows remote authenticated users to hijack the authentication of unspecified victims. The exact vectors used for the attack...

CVE-2015-6262

CVE-2015-6262 describes a cross-site request forgery vulnerability in Cisco Prime Infrastructure (versions 1.2(0.103) and 2.0(0.0)) that could allow remote attackers to hijack a user’s session. Root cause: insufficient CSRF protections in the web interface. Exploitation involves luring a user to ...

Actiontec GT784WN Modem Cross-Site Request Forgery Vulnerability

The Actiontec GT784WN is a DSL Digital Subscriber Line modem router from Actiontec USA. A cross-site request forgery vulnerability exists in Actiontec GT784WN modems using firmware versions prior to NCS01-1.0.13. A remote attacker could exploit the vulnerability to hijack authentication or hijack...

PT-2015-5966

Name of the Vulnerable Software and Affected Versions Actiontec GT784WN versions prior to NCS01-1.0.13 Description A cross-site request forgery issue allows remote attackers to hijack the authentication or intranet connectivity of users. Recommendations For versions prior to NCS01-1.0.13, update...

CVE-2015-2905: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability on Actiontec GT784WN modems with firmware before NCS01-1.0.13 allows remote attackers to hijack the authentication or intranet connectivity of arbitrary users...

CVE-2015-6523

The CVE-2015-6523 entry concerns the WordPress Portfolio plugin prior to version 1.05, where a Cross-Site Request Forgery (CSRF) flaw in the instagram-portfolio page of wp-admin/options-general.php allows remote attackers to hijack administrator authentication. The vulnerability arises from the p...

CVE-2015-6517

Cross-site request forgery CSRF vulnerability in phpLiteAdmin 1.1 allows remote attackers to hijack the authentication of users for requests that drop database tables via the droptable parameter to phpliteadmin.php...

CVE-2015-5508: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the XC NCIP Provider module in the eXtensible Catalog XC Drupal Toolkit allows remote attackers to hijack the authentication of users with the "administer ncip providers" permission for requests that alter NCIP providers via a crafted request...

TP-LINK WR1043N Multiple Cross-Site Request Forgery (CVE-2013-2645)

Multiple cross-site request forgery CSRF vulnerabilities on the TP-LINK WR1043N router with firmware TL-WR1043NDV1120405 allow remote attackers to hijack the authentication of administrators for requests...

PT-2015-6498

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 2.5 MR1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations For Cisco WebEx Meetings Server version 2.5 MR1, update to...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in SecuritySetting/UserSecurity/UserManagement.aspx in B.A.S C2Box before 4.0.0 r19171 allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via certain vectors...

CVE-2015-5530

Multiple cross-site request forgery CSRF vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to hijack the authentication of administrators for requests that add an administrator account via a request to dashboard/users/create/...

PT-2015-6975

Name of the Vulnerable Software and Affected Versions Free Reprintables ArticleFR version 3.0.6 Description The issue allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a request to "dashboard/users/create/". This is due to...

CVE-2015-4460: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in SecuritySetting/UserSecurity/UserManagement.aspx in B.A.S C2Box before 4.0.0 r19171 allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via certain vectors...

PT-2015-3183

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine versions 1.20.793 through 2.00.169 Description The issue is related to a cross-site request forgery CSRF vulnerability in the web framework. This vulnerability allows remote attackers to hijack the authentication...