CVE-2012-2097

Cross-site request forgery CSRF vulnerability in the Autosave module 6.x before 6.x-2.10 and 7.x-2.x before 7.x-2.0 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests involving "submitting saved results to a node."...

PT-2012-3842

Name of the Vulnerable Software and Affected Versions CDN2 Video module versions 6.x for Drupal Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of victims via unknown vectors. Recommendations For CDN2 Video module version 6.x,...

PT-2012-5326

Name of the Vulnerable Software and Affected Versions PHPJabbers Vacation Rental Script affected versions not specified Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a...

CVE-2012-2080: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Node Limit Number module before 6.x-1.2 for Drupal allows remote attackers to hijack the authentication of users with the administer node limitnumber permission for requests that delete limits...

CVE-2012-2077: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to hijack the authentication of users with administer sharethis permissions via unknown vectors "outside of the Form API."...

CVE-2012-4325: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in upload/users.php in Utopia News Pro UNP 1.4.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts...

CVE-2012-4324: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in PHPJabbers Vacation Rental Script allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a create action in the AdminUsers module to index.php...

PT-2012-5328

Name of the Vulnerable Software and Affected Versions AlstraSoft Site Uptime Enterprise version 5.4 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of administrators. This occurs due to a vulnerability in the commonsettings.php...

PT-2012-5327

Name of the Vulnerable Software and Affected Versions Utopia News Pro UNP versions 1.4.0 and earlier Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of administrators for requests that add administrator accounts. This is related t...

CVE-2012-4280: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in admin/agenteditor.php in Free Realty 3.1-0.6 allow remote attackers to hijack the authentication of administrators for requests that 1 add an agent via an addagent action or 2 modify an agent...

CVE-2012-2602

CVE-2012-2602 affects SolarWinds Orion Network Performance Monitor (NPM) prior to 10.3.1, enabling CSRF attacks that can hijack administrator sessions to: (1) create new user accounts via CreateUserStepContainer on Admin/Accounts/Add/OrionAccount.aspx and (2) modify account privileges via a ynAdm...

CVE-2012-2602: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in SolarWinds Orion Network Performance Monitor NPM before 10.3.1 allow remote attackers to hijack the authentication of administrators for requests that 1 create user accounts via CreateUserStepContainer actions to...

PT-2012-4128

Name of the Vulnerable Software and Affected Versions SolarWinds Orion Network Performance Monitor versions prior to 10.3.1 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in eZOE flash player in eZ Publish 4.1 through 4.6 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2012-3940

Name of the Vulnerable Software and Affected Versions Drupal Addressbook module versions 6.x-4.2 and earlier Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of victims via unknown vectors. Recommendations For Drupal Addressbook...

CVE-2012-4053: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in eZOE flash player in eZ Publish 4.1 through 4.6 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-3384: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-4281

Multiple cross-site request forgery CSRF vulnerabilities in Moodle 2.0.x before 2.0.2 allow remote attackers to hijack the authentication of arbitrary users for requests that mark the completion of 1 an activity or 2 a course...

PT-2012-1829

Name of the Vulnerable Software and Affected Versions Moodle versions 2.0.0 through 2.0.1 Description The issue allows remote attackers to hijack the authentication of arbitrary users for requests that mark the completion of an activity or a course due to multiple cross-site request forgery CSRF...

PT-2012-1808

Name of the Vulnerable Software and Affected Versions Moodle versions 1.9.x through 1.9.10 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims for requests that modify an RSS feed in an RSS block. Recommendations For Moodle versions 1.9.x...