Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the AXIS 207W camera allow remote attackers to perform certain actions as administrators via 1 axis-cgi/admin/restart.cgi, 2 the user and sgrp parameters to axis-cgi/admin/pwdgrp.cgi in an add action, or 3 the server parameter to...

CVE-2007-4746

The CVE-2007-4746 issue involves Cisco Video Surveillance devices where default passwords exist for sypixx and root accounts. Affected are the Cisco Video Surveillance IP Gateway Encoder/Decoder (Standalone and Module) firmware 1.8.1 and earlier; Video Surveillance SP/ISP Decoder Software firmwar...

CVE-2007-3704

The CVE-2007-3704 issue affects Entertainment CMS, where remote attackers can bypass authentication by setting the adminLogged cookie to “Administrator” and perform certain administrative actions. According to NVD, this yields a CVSS v2 base score of 7.5 (Network attack, low complexity, no user i...

CVE-2006-6785

The 1 settings.php and 2 subscribers.php scripts in Open Newsletter 2.5 and earlier do not exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, or execute arbitrary code in conjunction with another vulnerability...

PT-2005-2651 · Help Center Live · Help Center Live

Name of the Vulnerable Software and Affected Versions: Help Center Live affected versions not specified Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This allows remote attackers to perform actions as the administrator via a link or IMG tag to "view.php"...