Lucene search
+L

942 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/09/06 12:00 a.m.•6 views

CVE-2013-3605: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Coursemill Learning Management System LMS 6.6 allows remote attackers to hijack the authentication of arbitrary users via vectors related to cookies...

6.8CVSS6.1AI score0.00619EPSS
SaveExploits0References2
NVD
NVD
•added 2013/09/05 3:27 a.m.•26 views

CVE-2013-3479

Cross-site request forgery CSRF vulnerability in the ShareThis plugin before 7.0.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify this plugin's settings...

6.8CVSS7.1AI score0.01178EPSS
SaveExploits0References2
NVD
NVD
•added 2013/08/29 12:07 p.m.•32 views

CVE-2013-3472

Cross-site request forgery CSRF vulnerability in the Enterprise License Manager ELM in Cisco Unified Communications Manager CM allows remote attackers to hijack the authentication of arbitrary users for requests that make ELM modifications, aka Bug ID CSCui58210...

6.8CVSS7.2AI score0.00708EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2013/08/29 10:00 a.m.•43 views

CVE-2013-3472

Cross-site request forgery CSRF vulnerability in the Enterprise License Manager ELM in Cisco Unified Communications Manager CM allows remote attackers to hijack the authentication of arbitrary users for requests that make ELM modifications, aka Bug ID CSCui58210...

7.2AI score0.00708EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2013/08/28 12:00 a.m.•3 views

PT-2013-4495

Name of the Vulnerable Software and Affected Versions Corporater EPM Suite affected versions not specified Description A cross-site request forgery CSRF issue exists in the saveProperties.html file, allowing remote attackers to hijack the authentication of arbitrary users for requests that change...

6.8CVSS0.00619EPSS
SaveExploits0References2
Mend
Mend
•added 2013/08/19 8:00 p.m.•2 views

CVE-2013-5313

Cross-site request forgery CSRF vulnerability in core/admin/modules/users/update.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify arbitrary user accounts via an edit user action...

6.8CVSS0.00885EPSS
SaveExploits1References1
Prion
Prion
•added 2013/08/19 1:07 p.m.•26 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in core/admin/modules/users/create.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create an administrative user via an add user action to index.php...

6.8CVSS7.5AI score0.02199EPSS
SaveExploits5References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/08/19 12:00 a.m.•7 views

CVE-2013-5313: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in core/admin/modules/users/update.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify arbitrary user accounts via an edit user action...

6.8CVSS6AI score0.00885EPSS
SaveExploits1References2
Mend
Mend
•added 2013/08/19 12:00 a.m.•4 views

CVE-2013-4881

Cross-site request forgery CSRF vulnerability in core/admin/modules/users/create.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create an administrative user via an add user action to index.php...

6.8CVSS0.02199EPSS
SaveExploits5References5
Positive Technologies
Positive Technologies
•added 2013/08/09 12:00 a.m.•3 views

PT-2013-4256

Name of the Vulnerable Software and Affected Versions Xhanch - My Twitter plugin versions prior to 2.7.7 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of administrators for requests that change unspecified settings. This occurs ...

6.8CVSS0.01195EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/08/09 12:00 a.m.•4 views

CVE-2013-3253: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in admin/setting.php in the Xhanch - My Twitter plugin before 2.7.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change unspecified settings...

6.8CVSS5.9AI score0.01195EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2013/08/08 12:00 a.m.•3 views

PT-2013-4258

Name of the Vulnerable Software and Affected Versions Shareaholic SexyBookmarks plugin version 6.1.4.0 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of users for requests that manipulate plugin settings. Recommendations For Shareaholic...

6.8CVSS0.01081EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/08/08 12:00 a.m.•4 views

CVE-2013-3256: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Shareaholic SexyBookmarks plugin 6.1.4.0 for WordPress allows remote attackers to hijack the authentication of users for requests that "manipulate plugin settings."...

6.8CVSS5.9AI score0.01081EPSS
SaveExploits0References2
NVD
NVD
•added 2013/08/06 1:20 p.m.•29 views

CVE-2013-3992

Cross-site request forgery CSRF vulnerability in IBM InfoSphere BigInsights 2.0 through 2.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

6CVSS6.5AI score0.00579EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2013/08/05 8:00 p.m.•34 views

CVE-2013-3992

Cross-site request forgery CSRF vulnerability in IBM InfoSphere BigInsights 2.0 through 2.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

6.5AI score0.00579EPSS
SaveExploits0References6
Prion
Prion
•added 2013/08/05 1:22 p.m.•25 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Cisco Unified Communications Manager Unified CM allow remote attackers to hijack the authentication of arbitrary users for requests that perform arbitrary Unified CM operations, aka Bug ID CSCui13033...

6.8CVSS7.9AI score0.00576EPSS
SaveExploits0References1
CVE
CVE
•added 2013/07/31 3:00 p.m.•72 views

CVE-2013-4671

Symantec Web Gateway (SWG) is affected by CVE-2013-4671, a CSRF vulnerability in the management console present before version 5.1.1. The issue allows an authenticated remote user to hijack the authentication of unspecified victims via unknown vectors, enabling potential unauthorized actions with...

6CVSS6.6AI score0.02652EPSS
SaveExploits4References5Affected Software3
Positive Technologies
Positive Technologies
•added 2013/07/31 12:00 a.m.•4 views

PT-2013-5122

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions prior to 5.1.1 Description A cross-site request forgery CSRF issue exists in the management console of the Symantec Web Gateway appliance. This allows remote authenticated users to hijack the authentication of oth...

6CVSS0.02652EPSS
SaveExploits4References6
NVD
NVD
•added 2013/07/12 9:55 p.m.•41 views

CVE-2013-2704

Cross-site request forgery CSRF vulnerability in the Dropdown Menu Widget plugin 1.9.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting XSS sequences...

6.8CVSS6.5AI score0.00954EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2013/07/12 12:00 a.m.•2 views

PT-2013-3881

Name of the Vulnerable Software and Affected Versions Dropdown Menu Widget plugin version 1.9.1 Description The issue is a cross-site request forgery CSRF vulnerability that allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting XSS...

6.8CVSS0.00954EPSS
SaveExploits0References4
Rows per page
Query Builder