PT-2011-2251

Name of the Vulnerable Software and Affected Versions HP Power Manager versions 4.3.2 and earlier Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts. Recommendations For HP Powe...

CVE-2011-0046

Multiple cross-site request forgery CSRF vulnerabilities in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 allow remote attackers to hijack the authentication of arbitrary users for requests related to 1 adding a saved search in buglist.cgi, 2 voting in...

CVE-2011-0650

Cross-site request forgery CSRF vulnerability in Greenbone Security Assistant GSA before 2.0+rc3 allows remote attackers to hijack the authentication of users for requests that send email via an OMP request to OpenVAS Manager. NOTE: this issue can be leveraged to bypass authentication requirement...

PT-2011-2521

Name of the Vulnerable Software and Affected Versions phpLD version 4.1.0 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of administrators for requests that add an administrator via the N action. This occurs in the admin/conf use...

CVE-2011-0643: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in admin/confusersedit.php in PHP Link Directory phpLD 4.1.0 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via the N action...

CVE-2011-0503

CVE-2011-0503 is a CSRF in VaM Shop (versions 1.6, 1.6.1 and likely earlier) where requests from an authenticated admin could change user status (admin/customers.php) or modify user permissions (admin/accounting.php). The root cause is insufficient validation of the request origin in several admi...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in usercp2.php in MyBB aka MyBulletinBoard before 1.4.12 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-4627

Cross-site request forgery CSRF vulnerability in usercp2.php in MyBB aka MyBulletinBoard before 1.4.12 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2010-5510

Name of the Vulnerable Software and Affected Versions iSpot versions 2.0.0.0 R1679 ClearSpot versions 2.0.0.0 R1512 through 2.0.0.0 R1786 with firmware 1.9.9.4 Description The issue allows remote attackers to hijack the authentication of administrators for various requests, including executing...

CVE-2010-3449

Cross-site request forgery CSRF vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1; and Apache Continuum 1.3.6, 1.4.0, and 1.1 through 1.2.3.1; allows remote attackers to hijack the authentication of...

CVE-2010-3449

Cross-site request forgery CSRF vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1; and Apache Continuum 1.3.6, 1.4.0, and 1.1 through 1.2.3.1; allows remote attackers to hijack the authentication of...

PT-2010-4824

Name of the Vulnerable Software and Affected Versions Redback versions prior to 1.2.4 Apache Archiva versions 1.0 through 1.0.3 Apache Archiva versions 1.1 through 1.1.4 Apache Archiva versions 1.2 through 1.2.2 Apache Archiva versions 1.3 through 1.3.1 Apache Continuum version 1.3.6 Apache...

CVE-2010-3891

Cross-site request forgery CSRF vulnerability in ESAdmin/security.do in the administrator interface in IBM OmniFind Enterprise Edition before 9.1 allows remote attackers to hijack the authentication of administrators for requests that add an administrative user via a saveNewUser action...

PT-2010-5006

Name of the Vulnerable Software and Affected Versions Horde Application Framework versions prior to 3.3.9 Description A cross-site request forgery issue exists, allowing remote attackers to hijack the authentication of victims for requests to a preference form. Recommendations For versions prior ...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2010-5301

Name of the Vulnerable Software and Affected Versions HP Insight Control for Linux versions prior to 6.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of victims via unknown vectors. Recommendations For versions prior to 6.2, update to...

PT-2010-5138

Name of the Vulnerable Software and Affected Versions CMS Made Simple versions 1.8.1 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that reset the administrative password. Recommendations For CMS...

CVE-2010-1767

Removed by vendor...

CVE-2010-1767

Cross-site request forgery CSRF vulnerability in loader/DocumentThreadableLoader.cpp in WebCore in WebKit before r57041, as used in Google Chrome before 4.1.249.1059, allows remote attackers to hijack the authentication of unspecified victims via a crafted synchronous preflight XMLHttpRequest...

CVE-2010-3464: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in admin/managerusers.class.php in SantaFox 2.02, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests, as demonstrated by adding administrative users via the saveadmin action to admin/index.php...