Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Janetter before 3.3.0.0 aka 3.3.0 allow remote attackers to hijack the authentication of arbitrary users for requests that 1 tweet, 2 upload an image file, or 3 execute arbitrary commands...

CVE-2012-1236

Multiple cross-site request forgery CSRF vulnerabilities in Janetter before 3.3.0.0 aka 3.3.0 allow remote attackers to hijack the authentication of arbitrary users for requests that 1 tweet, 2 upload an image file, or 3 execute arbitrary commands...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in main.php in Contao formerly TYPOlight 2.11.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 delete users via a delete action in the user module, 2 delete news via a delete action in...

PT-2012-3153

Name of the Vulnerable Software and Affected Versions Janetter versions prior to 3.3.0.0 Description The issue allows remote attackers to hijack the authentication of arbitrary users for requests that tweet, upload an image file, or execute arbitrary commands due to multiple cross-site request...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in VMware vShield Manager vSM 1.0.1 before Update 2 and 4.1.0 before Update 2 allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allow remote attackers to hijack the authentication of arbitrary users for requests that modify data via the 1 commenting feature or 2 community script...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in xmlrpc.cgi in Bugzilla 4.0.2 through 4.0.4 and 4.1.1 through 4.2rc2, when modperl is used, allows remote attackers to hijack the authentication of arbitrary users for requests that modify the product's installation via the XML-RPC API...

CVE-2012-1235

Cross-site request forgery CSRF vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0235...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0235...

CVE-2012-1235

CVE-2012-1235 affects Advantech/BroadWin WebAccess 7.0 with a Cross-Site Request Forgery (CSRF) flaw that can allow remote authenticated users to hijack the authentication of unspecified victims, stemming from an incomplete fix for CVE-2012-0235. The ICS-CERT advisory notes that Advantech release...

PT-2012-3143

Name of the Vulnerable Software and Affected Versions GAzie versions 5.20 and earlier Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that change account information via an update action, such as changing the...

PT-2012-3152

Name of the Vulnerable Software and Affected Versions Advantech/BroadWin WebAccess version 7.0 Description A cross-site request forgery CSRF issue exists, allowing remote authenticated users to hijack the authentication of unspecified victims. This issue is a result of an incomplete fix for a...

PT-2012-2426

Name of the Vulnerable Software and Affected Versions Advantech/BroadWin WebAccess versions prior to 7.0 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of victims via unknown vectors. Recommendations For versions prior to 7.0, update to...

CVE-2012-1227: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of admins for requests that 1 modify the admin email address or 2 modify the blog title via a settings action; 3 add a page via an editpage action, or 4 add a...

CVE-2012-0997

CVE-2012-0997: CSRF vulnerability in 11in1 1.2.1 stable (12-31-2011) affecting admin/index.php, allowing an attacker to hijack administrator authentication to perform addTopic requests. Multiple connected sources corroborate CSRF context and impact (topic creation via addTopic) with PoC examples ...

PT-2012-3139

Name of the Vulnerable Software and Affected Versions PBBoard version 2.1.4 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the admin.php file. These vulnerabilities allow remote attackers to hijack the authentication of administrators for specific...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Terminal PHP Shell terminal extension 0.3.2 and earlier for TYPO3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-1083

This CVE concerns the TYPO3 ecosystem: the Terminal PHP Shell (terminal) extension, versions 0.3.2 and earlier, containing a Cross-Site Request Forgery (CSRF) vulnerability. The underlying issue allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. The p...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Mibew Messenger 1.6.4 and earlier allow remote attackers to hijack the authentication of operators for requests that insert cross-site scripting XSS sequences via the 1 address or 2 threadid parameters to operator/ban.php; or 3...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the clickthrough tracking functionality in the Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of administrators for requests that increase node rankings via the...