CVE-2011-5226

CVE-2011-5226: A CSRF flaw in wordpress_sentinel.php of the WordPress Sentinel plugin (version 1.0.0) allows remote attackers to hijack an administrator’s session by crafting requests that trigger snapshots. This affects the Sentinel plugin for WordPress; exploitation context and in-the-wild deta...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify the developer name via the wlcmsodevelopername parameter in a save action to...

CVE-2012-1900: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in admin/index.php in RazorCMS 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary web pages via a showcats action...

CVE-2012-4002

Cross-site request forgery CSRF vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-5326

Cross-site request forgery CSRF vulnerability in admin/function.php in IDevSpot iSupport 1.x allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via an administrators action...

CVE-2012-5320

Cross-site request forgery CSRF vulnerability in password.cgi in Sagem F@ST 2604 253180972B allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter...

CVE-2012-1416

Multiple cross-site request forgery CSRF vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrator accounts via a membernew action to myadmin/admin1members.php or 2 modify the default site title via a save action...

CVE-2012-5308

The CVE-2012-5308 entry concerns IBM Lotus Notes Traveler (servlet/traveler) with a CSRF vulnerability that, through to version 8.5.3.3 Interim Fix 1, allows remote attackers to hijack the authentication of arbitrary users via requests that create problem reports using a getReportProblem upload a...

PT-2012-5907

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.3.3 Interim Fix 2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users for requests that create problem reports via a...

PT-2012-5925

Name of the Vulnerable Software and Affected Versions IDevSpot iSupport versions 1.x Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via an administrators action. This occurs in the...

PT-2012-3185

Name of the Vulnerable Software and Affected Versions D-Link DSL-2640B Firmware version EU 4.00 Description A cross-site request forgery issue allows remote attackers to hijack administrator authentication for requests that change the administrator password via the sysPassword parameter...

PT-2012-4424

Name of the Vulnerable Software and Affected Versions Cerberus FTP Server versions prior to 5.0.5.0 Description The issue affects the web interface of the software, where multiple cross-site request forgery CSRF vulnerabilities are present. These vulnerabilities allow remote attackers to hijack t...

CVE-2012-2999: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the web interface in Cerberus FTP Server before 5.0.5.0 allow remote attackers to hijack the authentication of administrators for requests that 1 add a user account or 2 reconfigure the state of the FTP service, as demonstrated by a...

CVE-2012-4448

Cross-site request forgery CSRF vulnerability in wp-admin/index.php in WordPress 3.4.2 allows remote attackers to hijack the authentication of administrators for requests that modify an RSS URL via a dashboardincominglinks edit action...

CVE-2012-4448

Cross-site request forgery CSRF vulnerability in wp-admin/index.php in WordPress 3.4.2 allows remote attackers to hijack the authentication of administrators for requests that modify an RSS URL via a dashboardincominglinks edit action...

PT-2012-5169

Name of the Vulnerable Software and Affected Versions JAMF Casper Suite versions prior to 8.61 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the editAccount.html file within the JAMF Software Server JSS interface. These vulnerabilities allow remote...

CVE-2012-4448: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in wp-admin/index.php in WordPress 3.4.2 allows remote attackers to hijack the authentication of administrators for requests that modify an RSS URL via a dashboardincominglinks edit action...

PT-2012-2174

Name of the Vulnerable Software and Affected Versions Public Knowledge Project Open Harvester Systems versions 2.3.1 and earlier Description A cross-site request forgery CSRF issue exists in the index/manager/fileUpload endpoint, allowing remote attackers to hijack the authentication of...

PT-2012-2172

Name of the Vulnerable Software and Affected Versions Public Knowledge Project Open Conference Systems versions 2.3.4 and earlier Description A cross-site request forgery CSRF issue exists in the index/manager/fileUpload endpoint, allowing remote attackers to hijack the authentication of...

CVE-2012-1633

CVE-2012-1633 affects Drupal via the Password Policy module (6.x-1.x prior to 6.x-1.4 and 7.x-1.0 beta3). The vulnerability is a Cross-site Request Forgery (CSRF) that allows remote attackers to hijack the authentication of administrative users for requests that unblock a user. Impact is administ...