PT-2021-14108

Name of the Vulnerable Software and Affected Versions: ELECOM WRC-300FEBK-S affected versions not specified Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via an unspecified vector. This...

PT-2021-14111

Name of the Vulnerable Software and Affected Versions: ELECOM NCC-EWF100RMWH2 affected versions not specified Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via an unspecified vector. Thi...

CVE-2021-20652

Cross-site request forgery CSRF vulnerability in Name Directory 1.17.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2020-5641: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in GS108Ev3 firmware version 2.06.10 and earlier allows remote attackers to hijack the authentication of administrators and the product's settings may be changed without the user's intention or consent via unspecified vectors...

CVE-2020-26522: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in mod/user/actuser.php in Garfield Petshop through 2020-10-01 allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts...

PT-2020-18591

Name of the Vulnerable Software and Affected Versions NETGEAR switching hubs GS716Tv2 versions 5.4.2.30 and earlier NETGEAR switching hubs GS724Tv3 versions 5.4.2.30 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of...

CVE-2020-5576

Cross-site request forgery CSRF vulnerability in Movable Type series Movable Type 7 r.4606 7.2.1 and earlier Movable Type 7, Movable Type Advanced 7 r.4606 7.2.1 and earlier Movable Type Advanced 7, Movable Type for AWS 7 r.4606 7.2.1 and earlier Movable Type for AWS 7, Movable Type 6.5.3 and...

PT-2020-18551

Name of the Vulnerable Software and Affected Versions Movable Type versions prior to 7.2.1 Movable Type Advanced versions prior to 7.2.1 Movable Type for AWS versions prior to 7.2.1 Movable Type 6.5 versions prior to 6.5.3 Movable Type Advanced 6.5 versions prior to 6.5.3 Movable Type 6.3 version...

PT-2020-18524

Name of the Vulnerable Software and Affected Versions EasyBlocks IPv6 versions 2.0.1 and earlier EasyBlocks Enterprise versions 2.0.1 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators via unspecified vectors. Thi...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in ATutor 2.2 allow remote attackers to hijack the authentication of administrators for requests that 1 create an administrator account via a request to mods/core/users/admins/create.php or 2 create a user account via a request to...

CVE-2015-1583

Multiple cross-site request forgery CSRF vulnerabilities in ATutor 2.2 allow remote attackers to hijack the authentication of administrators for requests that 1 create an administrator account via a request to mods/core/users/admins/create.php or 2 create a user account via a request to...

PT-2020-7806

Name of the Vulnerable Software and Affected Versions: ATutor version 2.2 Description: The issue allows remote attackers to hijack the authentication of administrators for requests that create an administrator account via a request to "mods/ core/users/admins/create.php" or create a user account...

CVE-2012-2629: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF and cross-site scripting XSS vulnerabilities in Axous 1.1.1 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 add an administrator account via an addnew action to admin/administratorsadd.php; or 2 conduct...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

PT-2020-18505

Name of the Vulnerable Software and Affected Versions Easy Property Listings versions prior to 3.4 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators. The attack vector is not specified. Recommendations For versions prior to 3.4,...

PT-2020-3032

Name of the Vulnerable Software and Affected Versions Expedition Migration Tool versions 1.1.51 and earlier Description The issue is related to insufficient Cross-Site Request Forgery XSRF protection, which can be exploited by a remote attacker to hijack the authentication of administrators and...

CVE-2014-2225

Multiple cross-site request forgery CSRF vulnerabilities in Ubiquiti Networks UniFi Controller before 3.2.1 allow remote attackers to hijack the authentication of administrators for requests that 1 create a new admin user via a request to api/add/admin; 2 have unspecified impact via a request to...

CVE-2015-5483

Multiple cross-site request forgery CSRF vulnerabilities in the Private Only plugin 3.5.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 add users, 2 delete posts, or 3 modify PHP files via unspecified vectors, or 4 conduct cross-site...

CVE-2013-4865

Cross-site request forgery CSRF vulnerability in upgradestep2.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to hijack the authentication of users for requests that install arbitrary firmware via the squashfs parameter...

PT-2020-7515

Name of the Vulnerable Software and Affected Versions: MiCasaVerde VeraLite version 1.5.408 Description: A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests, enabling the installation of arbitrary firmware via the squashfs parameter. This can...