CVE-2013-3252: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the options admin page in the WP-PostViews plugin before 1.63 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...

PT-2014-2664

Name of the Vulnerable Software and Affected Versions qTranslate plugin versions 2.5.34 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that change plugin settings. Recommendations For qTranslate...

PT-2014-2289

Name of the Vulnerable Software and Affected Versions DVS Custom Notification plugin versions 1.0.1 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for requests that change application settings or conduct cross-site scripting XSS attacks...

CVE-2014-2340: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the XCloner plugin before 3.1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that create website backups via a request to wp-admin/plugins.php...

CVE-2013-4240

The CVE-2013-4240 entry concerns the WordPress HMS Testimonials plugin, affected in versions before 2.0.11. The vulnerability set consists of multiple CSRF flaws that allow an attacker to hijack an administrator’s authenticated session and perform actions such as adding testimonials, adding group...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-0126

Cross-site request forgery CSRF vulnerability in enrol/imsenterprise/importnow.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to hijack the authentication of administrators for requests that import an IMS Enterprise file...

PT-2014-3910

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management MDM Server versions 8.5 before 8.5.0.82 IBM InfoSphere Master Data Management MDM Server versions 9.0.1 before 9.0.1.38 IBM InfoSphere Master Data Management MDM Server versions 9.0.2 before 9.0.2.35 IBM...

CVE-2013-0300

Multiple cross-site request forgery CSRF vulnerabilities in ownCloud 4.5.x before 4.5.7 allow remote attackers to hijack the authentication of users for requests that 1 change the default view via the v parameter to apps/calendar/ajax/changeview.php, mount arbitrary 2 Google Drive or 3 Dropbox...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in ownCloud 4.5.x before 4.5.7 allow remote attackers to hijack the authentication of users for requests that 1 change the default view via the v parameter to apps/calendar/ajax/changeview.php, mount arbitrary 2 Google Drive or 3 Dropbox...

CVE-2013-0299

Multiple cross-site request forgery CSRF vulnerabilities in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allow remote attackers to hijack the authentication of users for requests that 1 change the timezone for the user via the lat and lng parameters to...

CVE-2013-1399

Multiple cross-site request forgery CSRF vulnerabilities in the 1 node request management, 2 live management, and 3 user administration components in the console in Puppet Enterprise PE before 2.7.1 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2014-3041

Name of the Vulnerable Software and Affected Versions HP System Management Homepage versions 7.1 through 7.2.2 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims. The attack vector is unknown. Recommendations For HP System Management...

PT-2014-2628

Name of the Vulnerable Software and Affected Versions Umisoft UMI.CMS versions prior to 2.9 build 21905 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a request to...

PT-2014-3568

Name of the Vulnerable Software and Affected Versions Serena Dimensions CM version 12.2 build 7.199.0 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of administrators for requests that use the user new master parameter to the...

CVE-2014-0745

Cross-site request forgery CSRF vulnerability in the Unified Serviceability subsystem in Cisco Unified Contact Center Express Unified CCX allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCum95502...

PT-2014-3804

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager Unified CM versions 10.01 and earlier Description A cross-site request forgery CSRF issue in the Call Detail Records Analysis and Reporting CAR interface of the OS Administration component allows remote...

PT-2014-3800

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager Unified CM versions 10.01 and earlier Description A cross-site request forgery CSRF issue exists in the Call Detail Records Analysis and Reporting CAR page, allowing remote attackers to hijack the...

CVE-2014-0813

Affected software : phpMyFAQ (before 2.8.6). Vulnerability : Cross-site request forgery (CSRF) in the web interface that lets an attacker hijack the authentication of an arbitrary user to modify settings. Root cause / details : The issue is a CSRF vulnerability allowing a malicious page to trigge...

PT-2014-3859

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 2.8.6 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users for requests that modify settings. Recommendations For versions prior to 2.8.6, update to...