PT-2022-13016

Name of the Vulnerable Software and Affected Versions Quiz And Survey Master versions prior to 7.3.7 Description A cross-site request forgery CSRF issue allows a remote attacker to hijack the authentication of administrators and conduct arbitrary operations via a specially crafted web page...

PT-2021-14294

Name of the Vulnerable Software and Affected Versions: Browser and Operating System Finder versions prior to 1.2 Description: A cross-site request forgery CSRF issue allows a remote unauthenticated attacker to hijack the authentication of an administrator via unspecified vectors. This can lead to...

PT-2021-14303

Name of the Vulnerable Software and Affected Versions: ELECOM LAN routers versions 1.03 and prior ELECOM LAN routers versions 1.25 and prior ELECOM LAN routers versions 1.52 and prior ELECOM LAN routers versions 2.11 and prior Description: A cross-site request forgery CSRF issue allows a remote...

CVE-2021-20851: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Browser and Operating System Finder versions prior to 1.2 allows a remote unauthenticated attacker to hijack the authentication of an administrator via unspecified vectors...

PT-2021-14286

Name of the Vulnerable Software and Affected Versions: EC-CUBE 2 series versions 2.11.0 through 2.17.1 Description: A cross-site request forgery CSRF issue allows a remote attacker to hijack the authentication of an Administrator and potentially delete the Administrator account via a specially...

PT-2021-14290

Name of the Vulnerable Software and Affected Versions: Push Notifications for WordPress Lite versions prior to 6.0.1 Description: A cross-site request forgery CSRF issue allows a remote attacker to hijack the authentication of an administrator and conduct an arbitrary operation via a specially...

CVE-2021-20842: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in EC-CUBE 2 series 2.11.0 to 2.17.1 allows a remote attacker to hijack the authentication of Administrator and delete Administrator via a specially crafted web page...

PT-2021-14249

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service versions 3.1.8 through 3.1.9 Description: A cross-site request forgery CSRF issue exists in the management screen, allowing a remote attacker to hijack the authentication of administrators. This could lead to unintended...

PT-2021-14213

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.0.0 through 5.0.2 Description: A cross-site request forgery CSRF issue allows a remote authenticated attacker to hijack the authentication of administrators and perform arbitrary operations via unspecified vectors...

PT-2021-14241

Name of the Vulnerable Software and Affected Versions: GroupSession Free edition versions 2.2.0 through 5.0.x GroupSession byCloud versions 3.0.3 through 5.0.x GroupSession ZION versions 3.0.3 through 5.0.x Description: A cross-site request forgery issue allows a remote attacker to hijack the...

CVE-2021-20783: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Optical BB unit E-WMTA2.3 allows a remote attacker to hijack the authentication of administrators via a specially crafted page...

CVE-2021-20781: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in WordPress Meta Data Filter & Taxonomies Filter versions prior to v.1.2.8 and versions prior to v.2.2.8 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2021-20779

Cross-site request forgery CSRF vulnerability in WordPress Email Template Designer - WP HTML Mail versions prior to 3.0.8 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

PT-2021-14234

Name of the Vulnerable Software and Affected Versions: WordPress Email Template Designer - WP HTML Mail versions prior to 3.0.8 Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators via unspecified vectors. This affects...

CVE-2021-20780: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in WPCS - WordPress Currency Switcher 1.1.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2021-20779: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in WordPress Email Template Designer - WP HTML Mail versions prior to 3.0.8 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2020-23264

Cross-site request forgery CSRF in Fork-CMS before 5.8.2 allow remote attackers to hijack the authentication of logged administrators...

CVE-2020-23264

CVE-2020-23264 is a CSRF vulnerability in the Fork-CMS platform, affecting versions before 5.8.2 . The issue allows remote attackers to hijack the authentication of logged-in administrators. The provided documents specify the vulnerability but do not include a concrete root-cause analysis or expl...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in LOGITEC LAN-W300N/RS allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the device settings may be conducted...

PT-2021-14107

Name of the Vulnerable Software and Affected Versions: ELECOM WRC-300FEBK-A affected versions not specified Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via an unspecified vector. This...