PT-2015-6532

Name of the Vulnerable Software and Affected Versions Drupal Spider Catalog module affected versions not specified Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the Spider Catalog module for Drupal. These vulnerabilities allow remote attackers to hijac...

PT-2015-6543

Name of the Vulnerable Software and Affected Versions Drupal versions prior to 6.x-1.6 Description A cross-site request forgery CSRF issue exists in the Registration codes module, allowing remote attackers to hijack the authentication of administrators for requests that delete registration codes...

PT-2015-6544

Name of the Vulnerable Software and Affected Versions Tracking Code module versions 7.x-1.x before 7.x-1.6 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of administrators for requests that disable tracking codes. Recommendations...

PT-2015-6546

Name of the Vulnerable Software and Affected Versions Campaign Monitor module versions 7.x-1.0 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the Campaign Monitor module for Drupal. These vulnerabilities allow remote attackers to hijack the authenticati...

CVE-2015-4361: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Registration codes module before 6.x-1.6 for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete registration codes via unspecified vectors...

CVE-2015-4382: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allow remote attackers to hijack the authentication of arbitrary users for requests that 1 create, 2 delete, or 3 alter invoices via unspecified vectors...

CVE-2015-4396: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Keyword Research module 6.x-1.x before 6.x-1.2 for Drupal allow remote attackers to hijack the authentication of users with the "kwresearch admin site keywords" permission for requests that 1 create, 2 delete, or 3 set priorities to...

CVE-2015-4355: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Watchdog Aggregator module for Drupal allows remote attackers to hijack the authentication of administrators for requests that enable or disable monitoring sites via unspecified vectors...

CVE-2015-4360: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Registration codes module before 6.x-1.6, 6.x-2.x before 6.x-2.8, and 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete role-rules via unspecified vectors...

CVE-2015-4364: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in includes/campaignmonitorlists.admin.inc in the Campaign Monitor module 7.x-1.0 for Drupal allow remote attackers to hijack the authentication of users for requests that 1 enable list subscriptions via a request to...

CVE-2015-4108: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Wing FTP Server before 4.4.7 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary code via a crafted request to adminluascript.html or 2 add a domain administrator via a crafted...

CVE-2015-4010

Cross-site request forgery CSRF vulnerability in the Encrypted Contact Form plugin before 1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the iframeurl parameter in an Update Page action in the...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that select a different default admin user via a GET request...

PT-2015-4704

Name of the Vulnerable Software and Affected Versions EMC RSA Web Threat Detection versions prior to 5.1 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations For versions prior to 5.1, update to version 5.1 or late...

PT-2015-4866

Name of the Vulnerable Software and Affected Versions Cisco Headend Digital Broadband Delivery System affected versions not specified Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users. This can be achieved by exploiting the...

CVE-2015-3902

Multiple cross-site request forgery CSRF vulnerabilities in the setup process in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x before 4.3.13.1, and 4.4.x before 4.4.6.1 allow remote attackers to hijack the authentication of administrators for requests that modify the configurati...

CVE-2015-3902

CVE-2015-3902 is a CSRF/XSRF vulnerability in the phpMyAdmin setup process. The issue affects PHPMyAdmin releases up to 4.0.x < 4.0.10.10, 4.2.x < 4.2.13.3, 4.3.x < 4.3.13.1, and 4.4.x

PT-2015-5492

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Optim Workload Replay versions prior to 2.1.0.3 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. Recommendations For...

PT-2015-4856

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution PC4HCS versions 10.61 and earlier Description The issue allows remote attackers to hijack the authentication of arbitrary users due to multiple cross-site request forgery CSRF...

PT-2015-4836

Name of the Vulnerable Software and Affected Versions Cisco Unity Connection versions 11.00.98000.225 through 11.00.98000.332 Description A cross-site request forgery CSRF issue in the CUCReports page allows remote attackers to hijack the authentication of arbitrary users. Recommendations For...