CVE-2014-8144

Cross-site request forgery CSRF vulnerability in doorkeeper before 1.4.1 allows remote attackers to hijack the authentication of unspecified victims for requests that read a user OAuth authorization code via unknown vectors...

PT-2014-2198

Name of the Vulnerable Software and Affected Versions Smoothwall Express versions 3.0 SP3 and earlier, Smoothwall Express version 3.1 Description A cross-site request forgery CSRF issue exists in the web management interface, specifically in the httpd/cgi-bin/shutdown.cgi endpoint. This allows...

CVE-2014-9431: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Smoothwall Express 3.1 and 3.0 SP3 allow remote attackers to hijack the authentication of administrators for requests that change the 1 admin or 2 dial password via a request to httpd/cgi-bin/changepw.cgi...

PT-2014-7081

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager version 5.1 before 5.1.0.15 IF0056 Description A cross-site request forgery CSRF issue allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences...

PT-2014-2221

Name of the Vulnerable Software and Affected Versions SyndeoCMS versions 3.0 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that add user accounts via a "save user" action. Recommendations For...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in IBM WebSphere Service Registry and Repository WSRR 6.3.x before 6.3.0.5, 7.0.x before 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authenticated users to hijack the authentication of unspecified victims via unknow...

CVE-2014-9414: Cross-Site Request Forgery (CSRF)

The W3 Total Cache plugin before 0.9.4.1 for WordPress does not properly handle empty nonces, which allows remote attackers to conduct cross-site request forgery CSRF attacks and hijack the authentication of administrators for requests that change the mobile site redirect URI via the...

PT-2014-6353

Name of the Vulnerable Software and Affected Versions NetIQ Access Manager NAM versions 4.0 through 4.1 Description A cross-site request forgery CSRF issue exists in the Administration Console server, specifically in the nps/servlet/webacc component. This allows remote attackers to hijack the...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the yURL ReTwitt plugin 1.4 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 yurllogin or 2 yurlanchor parameter in the...

CVE-2014-9368

Cross-site request forgery CSRF vulnerability in the twitterDash plugin 2.1 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the usernametwitterDash parameter in the twitterDash.php page...

PT-2014-8944

Name of the Vulnerable Software and Affected Versions yURL ReTwitt plugin versions 1.4 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks. This is achieved via the yurl login or yurl...

WordPress PWG Random Plugin <= 1.11 - Multiple CSRG and XSS

Because of these cross site request forgery vulnerabilities, the attackers can hijack the authentication of administrators for requests. In that way they can change plugin settings via unspecified vectors or conduct cross-site scripting attacks. Solution This plugin is closed...

PT-2014-7119

Name of the Vulnerable Software and Affected Versions Zenoss Core versions through 5 Beta 3 Description The issue allows remote attackers to hijack the authentication of arbitrary users due to multiple cross-site request forgery CSRF vulnerabilities. Recommendations For versions through 5 Beta 3,...

PT-2014-5052

Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower XC10 appliance versions 2.1 through 2.5 before FP4 Description A cross-site request forgery CSRF issue allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS...

CVE-2014-9344: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Snowfox CMS before 1.0.10 allows remote attackers to hijack the authentication of administrators for requests that add a new admin account via a submit action in the admin/accounts/create uri to snowfox/...

PT-2014-8947

Name of the Vulnerable Software and Affected Versions Snowfox CMS versions prior to 1.0.10 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that add a new admin account via a submit action in the...

CVE-2014-9300

Cross-site request forgery CSRF vulnerability in the cmisbrowser servlet in Content Management Interoperability Service CMIS in Alfresco Community Edition before 5.0.a allows remote attackers to hijack the authentication of users for requests that access unauthorized URLs and obtain user...

CVE-2014-9129

Cross-site request forgery CSRF vulnerability in the CreativeMinds CM Downloads Manager plugin before 2.0.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the addonstitle parameter in the...

PT-2014-8726

Name of the Vulnerable Software and Affected Versions X3 CMS versions 0.5.1 through 0.5.1.1 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the admin area. These vulnerabilities allow remote attackers to hijack the authentication of administrators via...

PT-2015-4174

Name of the Vulnerable Software and Affected Versions MediaWiki versions 1.20.x through 1.22.x before 1.22.14 MediaWiki versions 1.23.x before 1.23.7 MediaWiki before 1.19.22 Description A cross-site request forgery CSRF issue exists in the Special:ExpandedTemplates page of MediaWiki when...