CVE-2012-1057

Cross-site request forgery CSRF vulnerability in the clickthrough tracking functionality in the Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of administrators for requests that increase node rankings via the...

PT-2012-3047

Name of the Vulnerable Software and Affected Versions Flyspray version 0.9.9.6 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an "admin.newuser" action to "index.php". Recommendations For...

PT-2012-1328

Name of the Vulnerable Software and Affected Versions Hulihan Amethyst versions 0.1.5 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for requests that change the administrative password or the site's configuration due to multiple cross-sit...

PT-2012-3046

Name of the Vulnerable Software and Affected Versions Drupal Forward module versions 6.x-1.x through 6.x-1.20 Drupal Forward module versions 7.x-1.x through 7.x-1.2 Description A cross-site request forgery CSRF issue exists in the clickthrough tracking functionality of the Forward module,...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in admin/settings/update in DClassifieds 0.1 final allows remote attackers to hijack the authentication of administrators for requests that modify account settings such as the administrator password or email via certain Settings parameters...

PT-2012-2490

Name of the Vulnerable Software and Affected Versions eAccess Pocket WiFi aka GP02 router versions prior to 2.00 with firmware 11.203.11.05.168 Description The issue allows remote attackers to hijack the authentication of administrators for requests that initialize settings or reboot the device,...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to hijack the authentication of unspecified victims for requests that modify user accounts...

CVE-2012-0286: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to hijack the authentication of unspecified victims for requests that modify user accounts...

CVE-2011-3668

Cross-site request forgery CSRF vulnerability in postbug.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2rc1 allows remote attackers to hijack the authentication of arbitrary users for requests that create bug reports...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes...

CVE-2011-3636

Cross-site request forgery CSRF vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes...

PT-2011-4962

Name of the Vulnerable Software and Affected Versions Zenprise Device Manager versions 6.x through 6.1.8 Description A cross-site request forgery issue in the web console allows remote attackers to hijack the authentication of administrators for requests that wipe mobile devices. Recommendations...

CVE-2011-2773

Cross-site request forgery CSRF vulnerability in Mahara before 1.4.1 allows remote attackers to hijack the authentication of administrators for requests that add a user to an institution...

PT-2011-4080

Name of the Vulnerable Software and Affected Versions Mahara versions prior to 1.4.1 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that add a user to an institution. Recommendations For versions prior to 1.4.1,...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoTagging 0.08 and earlier plugins for Movable Type, allows remote attackers to hijack the authentication of...

PT-2011-4816

Name of the Vulnerable Software and Affected Versions Cisco Small Business SRP521W, SRP526W, and SRP527W versions prior to 1.1.24 Cisco Small Business SRP541W, SRP546W, and SRP547W versions prior to 1.2.1 Description A cross-site request forgery CSRF issue exists in the Services Ready Platform...

PT-2011-3085

Name of the Vulnerable Software and Affected Versions Google App Engine Python SDK versions prior to 1.5.4 Description A cross-site request forgery CSRF issue exists in the Interactive Console of the Google App Engine Python SDK. This allows remote attackers to hijack the authentication of...

CVE-2010-4881

Multiple cross-site request forgery CSRF vulnerabilities in calendar.class.php in ApPHP Calendar ApPHP CAL allow remote attackers to hijack the authentication of unspecified victims for requests that use the 1 categoryname, 2 categorydescription, 3 eventname, or 4 eventdescription parameter...

CVE-2011-2191

Cross-site request forgery CSRF vulnerability in Cherokee-admin in Cherokee before 1.2.99 allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences, as demonstrated by a crafted nickname field to vserver/apply...

PT-2011-1816

Name of the Vulnerable Software and Affected Versions ApPHP Calendar ApPHP CAL affected versions not specified Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the calendar.class.php file. These vulnerabilities allow remote attackers to hijack the...