Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Gecko CMS 2.2 and 2.3 allows remote attackers to hijack the authentication of administrators for requests that add an administrator user via a newuser request to admin/index.php...

CVE-2015-1374

CVE-2015-1374 relates to multiple CSRF vulnerabilities in ferretCMS 1.0.4-alpha, specifically in admin.php, enabling remote attackers to hijack administrator authentication for requests that perform (1) XSS, (2) SQL injection, and (3) unrestricted file upload. The connected sources confirm the af...

CVE-2014-7957

Multiple cross-site request forgery CSRF vulnerabilities in the Pods plugin before 2.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 conduct cross-site scripting XSS attacks via the toggled parameter in a toggle action in the pods-componen...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the SEO Plugin LiveOptim plugin before 1.1.4-free for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors. NOTE: some of these details are obtained from...

CVE-2014-100001

Cross-site request forgery CSRF vulnerability in the SEO Plugin LiveOptim plugin before 1.1.4-free for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors. NOTE: some of these details are obtained from...

CVE-2014-10008

Multiple cross-site request forgery CSRF vulnerabilities in Stark CRM 1.0 allow remote attackers to hijack the authentication of administrators for requests that add 1 an administrator via a crafted request to the admin page, 2 an agent via a crafted request to the agent page, 3 a sub-agent via a...

WordPress LiveOptim Plugin <= 1.1.3 - CSRF

Because of this vulnerability, the attackers can hijack the authentication of administrators for requests that change plugin settings via unspecified vectors. Solution Update the plugin...

WordPress plugin Lightbox Photo Gallery suffers from multiple cross-site request forgery vulnerabilities

WordPress is a use of PHP language development of blogging platform , users can support PHP and MySQL database server set up their own weblog . Lightbox Photo Gallery plugin is to provide automatic generation of thumbnails , watermarks , the use of slideshow way to view pictures and other feature...

WordPress Plugin Post to Twitter Has Multiple Cross-Site Request Forgery Vulnerabilities

WordPress is a blogging platform developed using the PHP language, which allows users to set up their own weblogs on servers that support PHP and MySQL databases.Post to Twitter plugin is a plugin that supports posting information to Twitter. The WordPress plugin Post to Twitter suffers from...

Multiple Cross-Site Request Forgery Vulnerabilities in Viralheat Argyle Social

Viralheat Argyle Social is a suite of enterprise social media platforms from Viralheat USA. Argyle Social suffers from multiple cross-site request forgery vulnerabilities that allow remote attackers to hijack administrator authentication requests...

WordPress Plugin TweetScribe Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their own weblogs on servers that support PHP and MySQL databases.TweetScribe plugin is a plugin that allows you to subscribe to WordPress blogs using your Twitter account through the tweetscribe.me...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Our Team Showcase our-team-enhanced plugin before 1.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change plugin settings via unspecified vectors or 2 conduct cross-site...

Multiple Cross-Site Request Forgery Vulnerabilities in Kandidat CMS

Multiple cross-site request forgery vulnerabilities exist in Kandidat CMS version 1.4.2, which allows remote attackers to exploit the vulnerabilities to hijack administrator request authentication...

SyndeoCMS Cross-Site Request Forgery Vulnerability

SyndeoCMS is a content management system for elementary schools. A cross-site request forgery vulnerability exists in SyndeoCMS 3.0 and prior versions that allows remote attackers to hijack the authentication of an administrator's request to add a user account, saveuser...

CVE-2011-5318

Multiple cross-site request forgery CSRF vulnerabilities in diafan.CMS before 5.1 allow remote attackers to hijack the authentication of administrators for requests that 1 modify articles via a savepost action to admin/news/saveNEWSID/, 2 modify settings via a savepost action to admin/site/save2/...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Smoothwall Express 3.1 and 3.0 SP3 allow remote attackers to hijack the authentication of administrators for requests that change the 1 admin or 2 dial password via a request to httpd/cgi-bin/changepw.cgi...

CVE-2014-9431

Multiple cross-site request forgery CSRF vulnerabilities in Smoothwall Express 3.1 and 3.0 SP3 allow remote attackers to hijack the authentication of administrators for requests that change the 1 admin or 2 dial password via a request to httpd/cgi-bin/changepw.cgi...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Simplelife plugin 1.2 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 simplehoverback, 2 simplehovertext, 3...

Multiple Cross-Site Request Forgery Vulnerabilities in Revive Adserver

Revive Adserver is open source ad server. Versions of Revive Adserver prior to 3.0.5 have multiple cross-site request forgery vulnerabilities that allow remote attackers to exploit vulnerabilities to hijack administrator request authentication...

CVE-2014-5217

Cross-site request forgery CSRF vulnerability in nps/servlet/webacc in the Administration Console server in NetIQ Access Manager NAM 4.x before 4.1 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via an fw.SetPassword...