PT-2014-8982

Name of the Vulnerable Software and Affected Versions gSlideShow plugin versions 0.1 and earlier for WordPress Description The issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks. This is achieved via the rss,...

PT-2014-7081

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager version 5.1 before 5.1.0.15 IF0056 Description A cross-site request forgery CSRF issue allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2014-6168: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in IBM Security Identity Manager 5.1 before 5.1.0.15 IF0056 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2012-1415

Cross-site request forgery CSRF vulnerability in lib/logout.php in DFLabs PTK 1.0.5 and earlier allows remote attackers to hijack the authentication of administrators or investigators for requests that trigger a logout...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in lib/logout.php in DFLabs PTK 1.0.5 and earlier allows remote attackers to hijack the authentication of administrators or investigators for requests that trigger a logout...

CVE-2012-1203

Cross-site request forgery CSRF vulnerability in starnet/index.php in SyndeoCMS 3.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts via a saveuser action...

CVE-2012-1203: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in starnet/index.php in SyndeoCMS 3.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts via a saveuser action...

PT-2014-2221

Name of the Vulnerable Software and Affected Versions SyndeoCMS versions 3.0 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that add user accounts via a "save user" action. Recommendations For...

CVE-2012-1415: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in lib/logout.php in DFLabs PTK 1.0.5 and earlier allows remote attackers to hijack the authentication of administrators or investigators for requests that trigger a logout...

PT-2014-2226

Name of the Vulnerable Software and Affected Versions DFLabs PTK versions 1.0.5 and earlier Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of administrators or investigators for requests that trigger a logout. Recommendations For...

IBM Security Access Manager Cross-Site Request Forgery Vulnerability

IBM Security Access Manager software is a highly scalable user authentication, authorization and Web SSO solution for implementing security policies on a variety of Web and application resources, centralized management of online portals. A cross-site request forgery vulnerability exists in IBM...

WordPress Plugin O2Tweet Has Multiple Cross-Site Request Forgery Vulnerabilities

WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. Multiple cross-site request forgery vulnerabilities exist in WordPress plugin O2Tweet 0.0.4 and earlier versions, which allow remote attacke...

WordPress Plugin Mikiurl Wordpress Eklentisi Has Multiple Cross-Site Request Forgery Vulnerabilities

WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. WordPress Plugin Mikiurl Wordpress Eklentisi 2.0 and prior versions suffer from multiple cross-site request forgery vulnerabilities that all...

WordPress Plugin TwitterDash Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. A cross-site request forgery vulnerability exists in the WordPress plugin TwitterDash, which allows remote attackers to hijack the...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in IBM WebSphere Service Registry and Repository WSRR 6.3.x before 6.3.0.5, 7.0.x before 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authenticated users to hijack the authentication of unspecified victims via unknow...

PT-2014-7094

Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR versions 6.3.x through 6.3.0.4 IBM WebSphere Service Registry and Repository WSRR versions 7.0.x through 7.0.0.4 IBM WebSphere Service Registry and Repository WSRR versions 7.5.x through 7.5.0...

CVE-2014-9414: Cross-Site Request Forgery (CSRF)

The W3 Total Cache plugin before 0.9.4.1 for WordPress does not properly handle empty nonces, which allows remote attackers to conduct cross-site request forgery CSRF attacks and hijack the authentication of administrators for requests that change the mobile site redirect URI via the...

CVE-2014-6187: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in IBM WebSphere Service Registry and Repository WSRR 6.3.x before 6.3.0.5, 7.0.x before 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authenticated users to hijack the authentication of unspecified victims via unknow...

PT-2014-8998

Name of the Vulnerable Software and Affected Versions simple-ip-ban plugin version 1.2.3 Description The issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks. This is achieved via the ip list, user agent list, or...

CVE-2014-5217

CVE-2014-5217 affects NetIQ Access Manager (NAM) 4.x prior to 4.1. The CSRF in the webacc servlet allows an authenticated admin session to change the administrative password via fw.SetPassword. The vulnerability requires an authenticated administrator and is documented alongside other issues (XXE...