CVE-2013-1414: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3.13 and 5.x before 5.0.2 allow remote attackers to hijack the authentication of administrators for requests that modify 1 settings or 2 policies, or 3 restart the device via a...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the WP Maintenance Mode plugin before 1.8.8 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings...

PT-2013-4255

Name of the Vulnerable Software and Affected Versions WP Maintenance Mode plugin versions prior to 1.8.8 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users for requests that modify the plugin's settings. Recommendations For...

CVE-2013-0144: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in cgi-bin/createuser.cgi on QNAP VioStor NVR devices with firmware 4.0.3 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts via a NEW USER action...

CVE-2013-2707

Cross-site request forgery CSRF vulnerability in the Login With Ajax plugin before 3.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings...

PT-2013-3882

Name of the Vulnerable Software and Affected Versions Login With Ajax plugin versions prior to 3.1 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users for requests that modify the plugin's settings. Recommendations For versions...

CVE-2013-2707: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Login With Ajax plugin before 3.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Noma component in GroundWork Monitor Enterprise 6.7.0 allow remote attackers to hijack the authentication of unspecified victims for requests that 1 store XSS sequences or 2 delete entries...

CVE-2013-3513

Multiple cross-site request forgery CSRF vulnerabilities in the Noma component in GroundWork Monitor Enterprise 6.7.0 allow remote attackers to hijack the authentication of unspecified victims for requests that 1 store XSS sequences or 2 delete entries...

WordPress Sharebar Plugin <= 1.2.5 - Multiple CSRF

Because of these vulnerabilities, the attackers can hijack the authentication of administrators for requests that insert cross-site scripting sequences, add or modify buttons. Solution Update the plugin...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Facebook Members plugin before 5.0.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify this plugin's settings...

CVE-2013-2702

Cross-site request forgery CSRF vulnerability in the Easy AdSense Lite plugin before 6.10 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings...

PT-2013-3880

Name of the Vulnerable Software and Affected Versions Facebook Members plugin versions prior to 5.0.5 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that modify the plugin's settings. Recommendations For versions...

CVE-2013-2709

Cross-site request forgery CSRF vulnerability in the FourSquare Checkins plugin before 1.3 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2013-2305

Cross-site request forgery CSRF vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0, Cybozu Dezie before 8.0.7, and Cybozu Mailwise before 5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords...

PT-2013-3876

Name of the Vulnerable Software and Affected Versions All in One Webmaster plugin versions prior to 8.2.4 Description The issue is related to a cross-site request forgery CSRF vulnerability, which allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS...

CVE-2012-6134

Cross-site request forgery CSRF vulnerability in the omniauth-oauth2 gem 1.1.1 and earlier for Ruby allows remote attackers to hijack the authentication of users for requests that modify session state...

CVE-2012-6134

Cross-site request forgery CSRF vulnerability in the omniauth-oauth2 gem 1.1.1 and earlier for Ruby allows remote attackers to hijack the authentication of users for requests that modify session state...

PT-2013-1909

Name of the Vulnerable Software and Affected Versions omniauth-oauth2 gem versions 1.1.1 and earlier Description The issue is a cross-site request forgery CSRF vulnerability that allows remote attackers to hijack the authentication of users for requests that modify session state. This is a type o...

CVE-2013-2778: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in addressbook/register/deleteuser.php in PHP Address Book 8.2.5 allows remote attackers to hijack the authentication of administrators for requests that delete accounts, a different vulnerability than CVE-2013-0135.1...