CVE-2013-7259

Multiple cross-site request forgery CSRF vulnerabilities in Neo4J 1.9.2 allow remote attackers to hijack the authentication of administrators for requests that execute arbitrary code, as demonstrated by a request to 1 db/data/ext/GremlinPlugin/graphdb/executescript or 2 db/manage/server/console/...

CVE-2013-7259

CVE-2013-7259 refers to multiple CSRF vulnerabilities in Neo4j 1.9.2. The flaw allows remote attackers to hijack administrator authentication and perform requests that can execute arbitrary code, demonstrated via (1) db/data/ext/GremlinPlugin/graphdb/execute_script and (2) db/manage/server/consol...

PT-2014-3312

Name of the Vulnerable Software and Affected Versions Neo4J version 1.9.2 Description The issue allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary code. This can be achieved through requests to API endpoints such as...

CVE-2013-7259: Improper Neutralization of Special Elements used in an OS Command

Multiple cross-site request forgery CSRF vulnerabilities in Neo4J 1.9.2 allow remote attackers to hijack the authentication of administrators for requests that execute arbitrary code, as demonstrated by a request to 1 db/data/ext/GremlinPlugin/graphdb/executescript or 2 db/manage/server/console/...