Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Storefront Application in DS Data Systems KonaKart before 7.3.0.0 allows remote attackers to hijack the authentication of administrators for requests that change a user email address via an unspecified GET request...

CVE-2014-5516

Cross-site request forgery CSRF vulnerability in the Storefront Application in DS Data Systems KonaKart before 7.3.0.0 allows remote attackers to hijack the authentication of administrators for requests that change a user email address via an unspecified GET request...

CVE-2014-5516: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Storefront Application in DS Data Systems KonaKart before 7.3.0.0 allows remote attackers to hijack the authentication of administrators for requests that change a user email address via an unspecified GET request...

CVE-2015-5595

Cross-site request forgery CSRF vulnerability in admin.php in Zenphoto before 1.4.9 allows remote attackers to hijack the authentication of admin users for requests that may cause a denial of service resource consumption...

PT-2019-7196

Name of the Vulnerable Software and Affected Versions Zenphoto versions prior to 1.4.9 Description A cross-site request forgery issue exists, allowing remote attackers to hijack the authentication of admin users for requests that may cause a denial of service due to resource consumption. This iss...

PT-2019-7090

Name of the Vulnerable Software and Affected Versions D-Link DWR-113 Rev. Ax versions prior to 2.03b02 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that change the admin password. Recommendations For versions...

PT-2019-17954

Name of the Vulnerable Software and Affected Versions Custom Body Class versions 0.6.0 and earlier Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators. The attack vectors are not specified. Recommendations For versions 0.6.0 and...

CVE-2013-3312: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Loftek Nexus 543 IP Camera allow remote attackers to hijack the authentication of unspecified victims for requests that change 1 passwords or 2 firewall configuration, as demonstrated by a request to setusers.cgi...

CVE-2019-5992

Cross-site request forgery CSRF vulnerability in WordPress Ultra Simple Paypal Shopping Cart v4.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2019-5986: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Hikari Denwa router/Home GateWay Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version...

CVE-2019-5980

Cross-site request forgery CSRF vulnerability in Related YouTube Videos versions prior to 1.9.9 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2019-5974

The CVE-2019-5974 entry describes a Cross-site request forgery (CSRF) vulnerability in the WordPress Contest Gallery plugin, affecting versions prior to 10.4.5. According to the connected sources, an attacker could hijack the administrator’s authenticated session via unspecified vectors when a lo...

PT-2019-17908

Name of the Vulnerable Software and Affected Versions Contest Gallery versions prior to 10.4.5 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators. The exact vectors used for the attack are not specified. Recommendations For versio...

PT-2019-17894

Name of the Vulnerable Software and Affected Versions WP Open Graph versions 1.6.1 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators via unspecified vectors. Recommendations For WP Open Graph versions 1.6.1 and...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on ASUS GT-AC5300 routers with firmware through 3.0.0.4.38432738 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to startapply.htm...

PT-2018-13844

Name of the Vulnerable Software and Affected Versions ASUS GT-AC5300 routers with firmware through 3.0.0.4.384 32738 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in phpMyFAQ before 2.8.13 allow remote attackers to hijack the authentication of unspecified users for requests that 1 delete active users by leveraging improper validation of CSRF tokens or that 2 delete open questions, 3 activate users, 4...

PT-2018-9772

Name of the Vulnerable Software and Affected Versions: TOPdesk versions prior to 8.05.017 TOPdesk versions prior to 5.7.SR9 Description: A cross-site request forgery issue allows remote attackers to hijack the authentication of authenticated users for requests that can obtain sensitive informatio...

CVE-2018-8925

Cross-site request forgery CSRF vulnerability in admin/user.php in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows remote attackers to hijack the authentication of administrators via the 1 username, 2 password, 3 admin, 4 action, 5 uid, or 6 modifyadmin parameter...

CVE-2015-7610

Cross-site request forgery CSRF vulnerability in the login form in Zimbra Collaboration Suite aka ZCS before 8.6.0 Patch 10, 8.7.x before 8.7.11 Patch 2, and 8.8.x before 8.8.8 Patch 1 allows remote attackers to hijack the authentication of unspecified victims by leveraging failure to use a CSRF...