Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in eXtplorer 2.1 RC3 and earlier allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via an adduser admin action...

PT-2012-1050

Name of the Vulnerable Software and Affected Versions eXtplorer versions 2.1 RC3 and earlier Description The issue concerns multiple vulnerabilities in the eXtplorer package of the Debian GNU/Linux operating system, which can be exploited remotely to compromise the confidentiality, integrity, and...

CVE-2012-3362: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in eXtplorer 2.1 RC3 and earlier allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via an adduser admin action...

CVE-2011-4298

The CVE refers to multiple CSRF vulnerabilities in Moodle’s mod/wiki components affecting Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2, allowing remote attackers to hijack authentication for wiki data modification. The root cause is cross-site request forgery within the wiki module. Affected ...

CVE-2011-4298

Multiple cross-site request forgery CSRF vulnerabilities in mod/wiki/ components in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allow remote attackers to hijack the authentication of arbitrary users for requests that modify wiki data...

PT-2012-4050

Name of the Vulnerable Software and Affected Versions Netsweeper WebAdmin Portal affected versions not specified Description A cross-site request forgery CSRF issue exists in the accountmgr/adminupdate.php file of the WebAdmin Portal. This allows remote attackers to hijack the authentication of...

CVE-2012-2447: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in accountmgr/adminupdate.php in the WebAdmin Portal in Netsweeper allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts via an add action...

CVE-2012-0303: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Brightmail Control Center in Symantec Message Filter 6.3 allow remote attackers to hijack the authentication of arbitrary users for requests that 1 execute application commands or 2 create admin accounts...

PT-2012-5009

Name of the Vulnerable Software and Affected Versions Drupal Maestro module versions 7.x-1.x before 7.x-1.2 Description The issue allows remote attackers to hijack the authentication of administrators for requests that change workflows or insert cross-site scripting XSS sequences due to multiple...

PT-2012-4218

Name of the Vulnerable Software and Affected Versions SimpleMeta module versions 6.x-1.x before 6.x-2.0 Description The issue allows remote attackers to hijack the authentication of administrators for requests that delete or add a meta tag entry, due to multiple cross-site request forgery CSRF...

PT-2012-4217

Name of the Vulnerable Software and Affected Versions Node Hierarchy module versions 6.x-1.x before 6.x-1.5 for Drupal Description The issue allows remote attackers to hijack the authentication of administrators for requests that change a node hierarchy position via an up or down action. This is...

PT-2012-4204

Name of the Vulnerable Software and Affected Versions Drupal BrowserID Mozilla Persona module versions 7.x-1.x before 7.x-1.3 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users for requests that login a user to another web...

PT-2012-4206

Name of the Vulnerable Software and Affected Versions Drupal Comment Moderation module versions 6.x-1.x before 6.x-1.1 Description A cross-site request forgery issue exists, allowing remote attackers to hijack the authentication of administrators for requests that publish comments. Recommendation...

PT-2012-4131

Name of the Vulnerable Software and Affected Versions Bradford Network Sentry versions prior to 5.3.3 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the administrative interface. These vulnerabilities allow remote attackers to hijack the authentication ...

CVE-2012-2605: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote attackers to hijack the authentication of administrators for requests that 1 insert XSS sequences or 2 send messages to clients...

PT-2012-4105

Name of the Vulnerable Software and Affected Versions Bloxx Web Filtering versions prior to 5.0.14 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the administrative interface. These vulnerabilities allow remote attackers to hijack the authentication of...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to hijack the authentication of administrators for requests that cause a denial of service stack consumption and daemon crash via a malformed URL...

CVE-2012-1985: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to hijack the authentication of administrators for requests that cause a denial of service stack consumption and daemon crash via a malformed URL...

PT-2012-1744

Name of the Vulnerable Software and Affected Versions HP System Management Homepage version 6.2.2.7 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts. Recommendations For HP...

CVE-2011-3846: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH 6.2.2.7 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...