PT-2014-5333

Name of the Vulnerable Software and Affected Versions MediaWiki SemanticForms extension versions prior to 1.19.10 MediaWiki SemanticForms extension versions 1.2x prior to 1.21.4 MediaWiki SemanticForms extension versions 1.22.x prior to 1.22.1 Description A cross-site request forgery CSRF issue...

CVE-2012-6493

Cross-site request forgery CSRF vulnerability in Rapid7 Nexpose Security Console before 5.5.4 allows remote attackers to hijack the authentication of unspecified victims for requests that delete scan data and sites via a request to data/site/delete...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP8 through 11.0 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote attackers to hijack the authentication of...

PT-2014-2924

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management - Collaborative Edition versions 10.x through 10.1 FP7 IBM InfoSphere Master Data Management - Collaborative Edition versions 11.0 and earlier IBM InfoSphere Master Data Management Server for Product...

PT-2014-2387

Name of the Vulnerable Software and Affected Versions Rapid7 Nexpose Security Console versions prior to 5.5.4 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims for requests that delete scan data and sites via a request to...

PT-2014-3875

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM versions 2.0 through 2.0.0.2 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of arbitrary users for requests that modify configuration dat...

CVE-2014-0831: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that modify configuration data...

PT-2014-3879

Name of the Vulnerable Software and Affected Versions IBM Security QRadar SIEM versions 7.2 MR1 and earlier Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that modify console Auto Update settings. Recommendations...

CVE-2014-0010

Multiple cross-site request forgery CSRF vulnerabilities in user/profile/index.php in Moodle through 2.2.11, 2.3.x before 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 allow remote attackers to hijack the authentication of administrators for requests that delete 1...

PT-2014-3432

Name of the Vulnerable Software and Affected Versions Moodle versions 2.2.11 and earlier, 2.3.x before 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, 2.6.x before 2.6.1 Description The issue allows remote attackers to hijack the authentication of administrators for requests, specifically to dele...

PT-2014-3286

Name of the Vulnerable Software and Affected Versions Conceptronic CIPCAMPTIWL Camera version 1.0 with firmware 21.37.2.49 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of administrators for requests that add arbitrary users...

PT-2014-4016

Name of the Vulnerable Software and Affected Versions VMware vCloud Director versions 5.1.x through 5.1.2 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a logout. Recommendations For versions 5.1.x...

CVE-2012-6631

Cross-site request forgery CSRF vulnerability in accounts/admin/index.php in Vessio NetBill 1.2 allows remote attackers to hijack the authentication of administrators for requests that add accounts via a new-client action...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Newsletter Manager plugin 1.0.2 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change an email address or 2 conduct script insertion attacks. NOTE: the provenance o...

CVE-2012-6629: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Newsletter Manager plugin 1.0.2 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change an email address or 2 conduct script insertion attacks. NOTE: the provenance o...

CVE-2013-7107

Removed by vendor...

PT-2014-3014

Name of the Vulnerable Software and Affected Versions Atmail Webmail Server versions prior to 7.2 Description The issue allows remote attackers to hijack the authentication of administrators for various requests, including adding, modifying, or deleting user accounts, as well as stopping the...

CVE-2013-7256

Cross-site request forgery CSRF vulnerability in Opsview before 4.4.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-7233

Cross-site request forgery CSRF vulnerability in the retrospam component in wp-admin/options-discussion.php in WordPress 2.0.11 and earlier allows remote attackers to hijack the authentication of administrators for requests that move comments to the moderation list...

CVE-2013-7233

Cross-site request forgery CSRF vulnerability in the retrospam component in wp-admin/options-discussion.php in WordPress 2.0.11 and earlier allows remote attackers to hijack the authentication of administrators for requests that move comments to the moderation list...