CVE-2016-7980

Cross-site request forgery CSRF vulnerability in ecrire/exec/validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that execute the XML validator on a local file via a crafted validerxml request. NOTE: this issue can be combin...

CVE-2016-6642

Cross-site request forgery CSRF vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to hijack the authentication of administrators for requests that upload files...

CVE-2016-7123

Cross-site request forgery CSRF vulnerability in the admin web interface in GNU Mailman before 2.1.15 allows remote attackers to hijack the authentication of administrators...

UBUNTU-CVE-2016-6635

Cross-site request forgery CSRF vulnerability in the wpajaxwpcompressiontest function in wp-admin/includes/ajax-actions.php in WordPress before 4.5 allows remote attackers to hijack the authentication of administrators for requests that change the script compression option...

CVE-2016-5807

Tollgrade LightHouse SMS before 5.1 patch 3 allows remote authenticated users to bypass an intended administrative-authentication requirement, and read or change parameter values, via a direct request...

CVE-2016-4066

Cross-site request forgery CSRF vulnerability in Fortinet FortiWeb before 5.5.3 allows remote attackers to hijack the authentication of administrators for requests that change the password via unspecified vectors...

CVE-2016-2157

Cross-site request forgery CSRF vulnerability in mod/assign/adminmanageplugins.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote attackers to hijack the authentication of administrators for requests that manage...

Alibaba Clone B2B Script - Admin Authentication Bypass

Exploit for php platform in category web applications Exploit Title: Alibaba Clone B2B Script Admin Authentication Bypass Date: 2016-05-03 Exploit Author: Meisam Monsef email protected or email protected Vendor Homepage: http://alibaba-clone.com/ Version: All Versions Exploit : For enter , simply...

Alibaba Clone B2B Script - Admin Authentication Bypass

Exploit Title: Alibaba Clone B2B Script Admin Authentication Bypass Date: 2016-05-03 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://alibaba-clone.com/ Version: All Versions Exploit : For enter , simply enter the following code...

CVE-2016-0891

The CVE-2016-0891 entry documents Cross-Site Request Forgery (CSRF) vulnerabilities in EMC ViPR SRM (Watch4net) prior to version 3.7, affecting administrative pages and enabling an attacker to hijack administrator sessions. The root cause is CSRF protection absence in affected administrative work...

CVE-2016-1174

Cross-site request forgery CSRF vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators...

CVE-2016-1172

Cross-site request forgery CSRF vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators...

CVE-2016-1170

The CVE-2016-1170 entry describes a Cross-site request forgery (CSRF) vulnerability in the Casebook plugin for baserCMS, affecting versions prior to 0.9.4. Root cause: CSRF in the Casebook plugin allows remote attackers to hijack administrator authentication. Impact: arbitrary administrator actio...

WordPress Plugin Best Web Soft Captcha 4.1.5 - Multiple Vulnerabilities

WordPress Plugin Best Web Soft Captcha 4.1.5 - Multiple Vulnerabilities Exploit Title: BWS Captcha Multiple Vulnerabilities Discovery Date:12.03.2015 Public Disclosure Date:03.10.2016 Exploit Author: Colette Chamberland Contact: [email protected] Vendor Homepage: http://bestwebsoft.com/...

jenkins: CSRF vulnerability in some administrative actions (SECURITY-225)

Cross-site request forgery CSRF vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via vectors related to the HTTP GET method...

CVE-2015-7925

Cross-site request forgery CSRF vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to hijack the authentication of administrators for requests that trigger firmware upload, removal of configuration data, or a reboot...

CVE-2015-5731

Cross-site request forgery CSRF vulnerability in wp-admin/post.php in WordPress before 4.2.4 allows remote attackers to hijack the authentication of administrators for requests that lock a post, and consequently cause a denial of service editing blockage, via a get-post-lock action...

CVE-2015-7233

CVE-2015-7233 describes a CSRF vulnerability in the Drupal OSF module (7.x-3.x) before 7.x-3.1 when the OSF Import module is enabled. The issue allows remote attackers to hijack an administrator’s authenticated session to create new OSF datasets via unspecified vectors. Affected component is the ...

CVE-2015-6966

Multiple cross-site request forgery CSRF vulnerabilities in Nibbleblog before 4.0.5 allow remote attackers to hijack the authentication of administrators for requests that 1 create a post via a newsimple action to admin.php or 2 conduct cross-site scripting XSS attacks via the content parameter i...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Nibbleblog before 4.0.5 allow remote attackers to hijack the authentication of administrators for requests that 1 create a post via a newsimple action to admin.php or 2 conduct cross-site scripting XSS attacks via the content parameter i...