942 matches found
CVE-2013-3605: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in Coursemill Learning Management System LMS 6.6 allows remote attackers to hijack the authentication of arbitrary users via vectors related to cookies...
CVE-2013-3479
Cross-site request forgery CSRF vulnerability in the ShareThis plugin before 7.0.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify this plugin's settings...
CVE-2013-3472
Cross-site request forgery CSRF vulnerability in the Enterprise License Manager ELM in Cisco Unified Communications Manager CM allows remote attackers to hijack the authentication of arbitrary users for requests that make ELM modifications, aka Bug ID CSCui58210...
CVE-2013-3472
Cross-site request forgery CSRF vulnerability in the Enterprise License Manager ELM in Cisco Unified Communications Manager CM allows remote attackers to hijack the authentication of arbitrary users for requests that make ELM modifications, aka Bug ID CSCui58210...
PT-2013-4495
Name of the Vulnerable Software and Affected Versions Corporater EPM Suite affected versions not specified Description A cross-site request forgery CSRF issue exists in the saveProperties.html file, allowing remote attackers to hijack the authentication of arbitrary users for requests that change...
CVE-2013-5313
Cross-site request forgery CSRF vulnerability in core/admin/modules/users/update.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify arbitrary user accounts via an edit user action...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in core/admin/modules/users/create.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create an administrative user via an add user action to index.php...
CVE-2013-5313: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in core/admin/modules/users/update.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify arbitrary user accounts via an edit user action...
CVE-2013-4881
Cross-site request forgery CSRF vulnerability in core/admin/modules/users/create.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create an administrative user via an add user action to index.php...
PT-2013-4256
Name of the Vulnerable Software and Affected Versions Xhanch - My Twitter plugin versions prior to 2.7.7 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of administrators for requests that change unspecified settings. This occurs ...
CVE-2013-3253: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in admin/setting.php in the Xhanch - My Twitter plugin before 2.7.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change unspecified settings...
PT-2013-4258
Name of the Vulnerable Software and Affected Versions Shareaholic SexyBookmarks plugin version 6.1.4.0 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of users for requests that manipulate plugin settings. Recommendations For Shareaholic...
CVE-2013-3256: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Shareaholic SexyBookmarks plugin 6.1.4.0 for WordPress allows remote attackers to hijack the authentication of users for requests that "manipulate plugin settings."...
CVE-2013-3992
Cross-site request forgery CSRF vulnerability in IBM InfoSphere BigInsights 2.0 through 2.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...
CVE-2013-3992
Cross-site request forgery CSRF vulnerability in IBM InfoSphere BigInsights 2.0 through 2.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in Cisco Unified Communications Manager Unified CM allow remote attackers to hijack the authentication of arbitrary users for requests that perform arbitrary Unified CM operations, aka Bug ID CSCui13033...
CVE-2013-4671
Symantec Web Gateway (SWG) is affected by CVE-2013-4671, a CSRF vulnerability in the management console present before version 5.1.1. The issue allows an authenticated remote user to hijack the authentication of unspecified victims via unknown vectors, enabling potential unauthorized actions with...
PT-2013-5122
Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions prior to 5.1.1 Description A cross-site request forgery CSRF issue exists in the management console of the Symantec Web Gateway appliance. This allows remote authenticated users to hijack the authentication of oth...
CVE-2013-2704
Cross-site request forgery CSRF vulnerability in the Dropdown Menu Widget plugin 1.9.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting XSS sequences...
PT-2013-3881
Name of the Vulnerable Software and Affected Versions Dropdown Menu Widget plugin version 1.9.1 Description The issue is a cross-site request forgery CSRF vulnerability that allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting XSS...