10977 matches found
PT-2014-5024
Name of the Vulnerable Software and Affected Versions IBM Sametime Proxy Server and Web Client versions 9.0 through 9.0.0.1 Description A cross-site request forgery CSRF issue exists in the Web player, allowing remote attackers to hijack the authentication of arbitrary users for requests that...
CVE-2013-2713
Cross-site request forgery CSRF vulnerability in usersmaint.html in KrisonAV CMS before 3.0.2 allows remote attackers to hijack the authentication of administrators for requests that create user accounts via a crafted request...
PT-2014-5163
Name of the Vulnerable Software and Affected Versions Cisco Security Manager versions 4.6 and earlier Description A cross-site request forgery CSRF issue in the web framework allows remote attackers to hijack the authentication of arbitrary users for requests that make unspecified changes...
CVE-2013-2107
Cross-site request forgery CSRF vulnerability in the Mail On Update plugin before 5.2.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change the "List of alternative recipients" via the mailonupdatemailto parameter in the mail-on-update pag...
CVE-2013-2713: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in usersmaint.html in KrisonAV CMS before 3.0.2 allows remote attackers to hijack the authentication of administrators for requests that create user accounts via a crafted request...
CVE-2014-3267: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make unspecified changes, aka Bug ID CSCuo46427...
CVE-2013-2107: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Mail On Update plugin before 5.2.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change the "List of alternative recipients" via the mailonupdatemailto parameter in the mail-on-update pag...
PT-2014-2625
Name of the Vulnerable Software and Affected Versions KrisonAV CMS versions prior to 3.0.2 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that create user accounts via a crafted request. Recommendations For versio...
CVE-2014-3843
Cross-site request forgery CSRF vulnerability in the Search Everything plugin before 8.1.1 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
PT-2014-5547
Name of the Vulnerable Software and Affected Versions TinyMCE Color Picker plugin versions prior to 1.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of unspecified users for requests that change plugin settings. Recommendations For...
PT-2014-5545
Name of the Vulnerable Software and Affected Versions Search Everything plugin versions prior to 8.1.1 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims. The exact vectors used for the attack are not specified. Recommendations For...
CVE-2014-3843: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Search Everything plugin before 8.1.1 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2014-3845: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the TinyMCE Color Picker plugin before 1.2 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that change plugin settings via unknown vectors. NOTE: some of these details are obtained from third par...
tomcat: session fixation still possible with disableURLRewriting enabled
It was found that previous fixes in Tomcat 6 to path parameter handling introduced a regression that caused Tomcat to not properly disable URL rewriting to track session IDs when the disableURLRewriting option was enabled. A man-in-the-middle attacker could potentially use this flaw to hijack a...
tomcat: session fixation still possible with disableURLRewriting enabled
It was found that previous fixes in Tomcat 6 to path parameter handling introduced a regression that caused Tomcat to not properly disable URL rewriting to track session IDs when the disableURLRewriting option was enabled. A man-in-the-middle attacker could potentially use this flaw to hijack a...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Beetel 450TC2 Router with firmware TX6-0Q-005retail allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the uiViewToolsPassword and uiViewToolsPasswordConfirm parameters to...
PT-2014-3538
Name of the Vulnerable Software and Affected Versions Moodle versions 2.3.11 and earlier, 2.4.x before 2.4.10, 2.5.x before 2.5.6, 2.6.x before 2.6.3 Description The issue allows remote attackers to hijack sessions via a brute-force attack because login/token.php creates a MoodleMobile web-servic...
PT-2014-5485 · D Link · D-Link Dap 1150
Name of the Vulnerable Software and Affected Versions: D-Link DAP 1150 version 1.2.94 Description: The issue allows remote attackers to hijack the authentication of administrators for various requests, including enabling or disabling the DMZ in the Firewall/DMZ section via a request to "index.cgi...
PT-2014-3955
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server Metadata Workbench versions 8.1 through 9.1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations For versions 8.1 through...
CVE-2014-0933: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in IBM InfoSphere Information Server Metadata Workbench 8.1 through 9.1 allows remote attackers to hijack the authentication of arbitrary users...