Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Kanboard before 1.0.6 allows remote attackers to hijack the authentication of administrators for requests that add an administrative user via a save action to the default URI...

CVE-2014-3920

Cross-site request forgery CSRF vulnerability in Kanboard before 1.0.6 allows remote attackers to hijack the authentication of administrators for requests that add an administrative user via a save action to the default URI...

PT-2014-5606

Name of the Vulnerable Software and Affected Versions Kanboard versions prior to 1.0.6 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that add an administrative user via a save action to the default URI...

CVE-2014-4718: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Lunar CMS before 3.3-3 allow remote attackers to hijack the authentication of administrators for requests that 1 add Super users via a request to admin/usercreate.php or conduct cross-site scripting XSS attacks via the 2 email or 3 subje...

CVE-2014-4614

Multiple cross-site request forgery CSRF vulnerabilities in Piwigo before 2.6.2 allow remote attackers to hijack the authentication of administrators for requests that use the 1 pwg.groups.addUser, 2 pwg.groups.deleteUser, 3 pwg.groups.setInfo, 4 pwg.users.setInfo, 5 pwg.permissions.add, or 6...

CVE-2014-4614

Multiple cross-site request forgery CSRF vulnerabilities in Piwigo before 2.6.2 allow remote attackers to hijack the authentication of administrators for requests that use the 1 pwg.groups.addUser, 2 pwg.groups.deleteUser, 3 pwg.groups.setInfo, 4 pwg.users.setInfo, 5 pwg.permissions.add, or 6...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to hijack the authentication of arbitrary users...

PT-2014-5573

Name of the Vulnerable Software and Affected Versions Intercom Web Kyukincho versions prior to 3.0.030 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations For versions prior to 3.0.030, update to version 3.0.030 o...

CVE-2014-3882

Cross-site request forgery CSRF vulnerability in the Login rebuilder plugin before 1.2.0 for WordPress allows remote attackers to hijack the authentication of arbitrary users...

PT-2014-5574

Name of the Vulnerable Software and Affected Versions Login rebuilder plugin versions prior to 1.2.0 for WordPress Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations For versions prior to 1.2.0, update to...

CVE-2014-3882: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Login rebuilder plugin before 1.2.0 for WordPress allows remote attackers to hijack the authentication of arbitrary users...

CVE-2014-4155

Cross-site request forgery CSRF vulnerability in the ZTE ZXV10 W300 router with firmware W300V1.0.0aZRDLK allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a request to Forms/toolsadmin1...

PT-2014-5707

Name of the Vulnerable Software and Affected Versions ZTE ZXV10 W300 router version W300V1.0.0a ZRD LK Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a request to "Forms/too...

CVE-2014-4162: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Zyxel P-660HW-T1 v3 wireless router allow remote attackers to hijack the authentication of administrators for requests that change the 1 wifi password or 2 SSID via a request to Forms/WLANGeneral1...

PT-2014-5713

Name of the Vulnerable Software and Affected Versions Zyxel P-660HW-T1 version v3 Description The issue affects the Zyxel P-660HW-T1 wireless router, where multiple cross-site request forgery CSRF vulnerabilities exist. These vulnerabilities allow remote attackers to hijack the authentication of...

CVE-2014-3850: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Member Approval plugin 131109 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings to their default and disable registration approval via a request to...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Profiles component in IBM Connections through 3.0.1.1 CR3 allows remote authenticated users to hijack the authentication of arbitrary users for requests that trigger follow actions...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in IBM Tivoli Identity Manager ITIM 5.0 before 5.0.0.15 and 5.1 before 5.1.0.15 and IBM Security Identity Manager ISIM 6.0 before 6.0.0.2 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS...

PT-2014-3952

Name of the Vulnerable Software and Affected Versions IBM Connections versions prior to 3.0.1.1 CR3 Description A cross-site request forgery issue exists in the Profiles component, allowing remote authenticated users to hijack the authentication of arbitrary users for requests that trigger follow...

PT-2014-3978

Name of the Vulnerable Software and Affected Versions IBM Tivoli Identity Manager versions 5.0 through 5.0.0.15 IBM Tivoli Identity Manager versions 5.1 through 5.1.0.15 IBM Security Identity Manager versions 6.0 through 6.0.0.2 Description A cross-site request forgery CSRF issue allows remote...