PT-2014-8324

Name of the Vulnerable Software and Affected Versions HP System Management Homepage SMH versions prior to 3.2.3 on HP-UX B.11.23 HP System Management Homepage SMH versions prior to 3.2.8 on HP-UX B.11.31 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the...

CVE-2014-6312

Cross-site request forgery CSRF vulnerability in the Login Widget With Shortcode login-sidebar-widget plugin before 3.2.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the customstyleafo paramete...

CVE-2014-0168

Cross-site request forgery CSRF vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page...

CVE-2013-2645

Multiple cross-site request forgery CSRF vulnerabilities on the TP-LINK WR1043N router with firmware TL-WR1043NDV1120405 allow remote attackers to hijack the authentication of administrators for requests that 1 enable FTP access aka "FTP directory traversal" to /tmp via the shareEntire parameter ...

CVE-2014-6299

Cross-site request forgery CSRF vulnerability in the mmforum extension before 1.9.3 for TYPO3 allows remote attackers to hijack the authentication of users for requests that create posts via unspecified vectors...

CVE-2014-6299

Cross-site request forgery CSRF vulnerability in the mmforum extension before 1.9.3 for TYPO3 allows remote attackers to hijack the authentication of users for requests that create posts via unspecified vectors...

CVE-2014-2641

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 7.4 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 7.4 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

PT-2014-7813

Name of the Vulnerable Software and Affected Versions Exinda WAN Optimization Suite version 7.0.0 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a request to "admin/launch"...

PT-2014-4845

Name of the Vulnerable Software and Affected Versions HP System Management Homepage versions prior to 7.4 Description A cross-site request forgery issue allows remote authenticated users to hijack the authentication of other users via unknown vectors. Recommendations For versions prior to 7.4,...

CVE-2014-7190: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Openfiler 2.99.1 allow remote attackers to hijack the authentication of administrators for requests that 1 shutdown or 2 reboot the server via a request to admin/systemshutdown.html...

PT-2014-7825

Name of the Vulnerable Software and Affected Versions Openfiler version 2.99.1 Description The issue allows remote attackers to hijack the authentication of administrators for requests, enabling them to shutdown or reboot the server. This is achieved through a request to the "admin/system...

CVE-2013-3089

Cross-site request forgery CSRF vulnerability in apply.cgi in Belkin N300 F7D7301v1 router allows remote attackers to hijack the authentication of administrators for requests that modify configuration...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in apply.cgi in Linksys WRT310Nv2 2.0.0.1 allows remote attackers to hijack the authentication of administrators for requests that change passwords and modify remote management ports...

CVE-2013-3089

Cross-site request forgery CSRF vulnerability in apply.cgi in Belkin N300 F7D7301v1 router allows remote attackers to hijack the authentication of administrators for requests that modify configuration...

CVE-2013-3089

CVE-2013-3089 describes a CSRF vulnerability in Belkin N300 (F7D7301v1) routers, specifically in the apply.cgi handler. An attacker could remotely hijack an administrator’s authenticated session to perform configuration-modifying requests. The NVD entry lists a CSRF impact with partial confidenti...

CVE-2013-3083: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in cgi-bin/systemsetting.exe in Belkin F5D8236-4 v2 allows remote attackers to hijack the authentication of administrators for requests that open the remote management interface on arbitrary ports via the remotemgmtenabled and remotemgmtport parameter...

CVE-2014-4865

CSRF in CacheGuard OS 5.7.7 affects /gui/password-wadmin.apl allowing an attacker to hijack authenticated sessions. Root cause: missing CSRF validation in that endpoint; impact includes potential privilege/user authentication manipulation with partial confidentiality/ integrity/availability. CVSS...

CVE-2014-3037

Cross-site request forgery CSRF vulnerability in IBM Configuration Management Application aka VVC in IBM Rational Engineering Lifecycle Manager before 4.0.7 and 5.x before 5.0.1, Rational Software Architect Design Manager before 4.0.7 and 5.x before 5.0.1, and Rational Rhapsody Design Manager...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the User Management module in McAfee Network Security Manager NSM before 6.1.15.39 7.1.5.x before 7.1.5.15, 7.1.15.x before 7.1.15.7, 7.5.x before 7.5.5.9, and 8.x before 8.1.7.3 allows remote attackers to hijack the authentication of users for...