Lucene search
+L

428 matches found

NVD
NVD
added 2009/04/30 8:30 p.m.26 views

CVE-2009-1339

Cross-site request forgery CSRF vulnerability in TWiki before 4.3.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that update pages, as demonstrated by a URL for a save script in the SRC attribute of an IMG element, a related issue to CVE-2009-1434...

6CVSS6.7AI score0.00748EPSS
SaveExploits1References10
NVD
NVD
added 2009/04/20 2:30 p.m.26 views

CVE-2008-6729

Multiple cross-site request forgery CSRF vulnerabilities in password.php in PHPmotion 2.1 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that modify an account via the 1 password or 2 emailaddress parameter...

6.8CVSS7.5AI score0.00992EPSS
SaveExploits1References4
CVE
CVE
added 2009/04/13 4:00 p.m.57 views

CVE-2009-1290

The CVE-2009-1290 entry documents CSRF vulnerabilities in the IBM BladeCenter AMM web administration interface (including BladeCenter H with BPET36H 54). The underlying issue is cross-site request forgery that can enable remote attackers to hijack administrator authentication, demonstrated by a p...

6.8CVSS7.2AI score0.00984EPSS
SaveExploits2References5Affected Software1
CVE
CVE
added 2009/04/03 6:00 p.m.61 views

CVE-2008-6586

The CVE-2008-6586 entry documents a Cross-site request forgery (CSRF) vulnerability in the gui/index.php of µTorrent (uTorrent) WebUI 0.315. The vulnerability allows an attacker to hijack the authentication of users for requests that trigger the download of arbitrary torrent files via the add-url...

6.8CVSS7.5AI score0.027EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
added 2009/02/27 4:00 p.m.26 views

CVE-2008-6331

Multiple cross-site request forgery CSRF vulnerabilities in Streber before 0.08093 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...

7.2AI score0.00484EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2008/09/02 3:00 p.m.24 views

CVE-2008-3885

Cross-site request forgery CSRF vulnerability in Blogn BURO GUN 1.9.7 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make content modifications. NOTE: some of these details are obtained from third party information...

7.2AI score0.00581EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2008/08/27 8:00 p.m.29 views

CVE-2008-3736

Multiple cross-site request forgery CSRF vulnerabilities in 1 System Consultants La!Cooda WIZ 1.4.0 and earlier and 2 SpaceTag LacoodaST 2.1.3 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that a change passwords or b change configurations...

7.4AI score0.00559EPSS
SaveExploits0References6
Prion
Prion
added 2008/02/15 1:00 a.m.19 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in MyBB 1.2.11 and earlier allow remote attackers to 1 hijack the authentication of moderators or administrators for requests that delete threads via a domultideletethreads action to moderation.php and 2 hijack the authentication of arbitra...

6.8CVSS7.9AI score0.00656EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder