Cross site request forgery (csrf)

AXIS Communications products allow CSRF, as demonstrated by admin/pwdgrp.cgi, vaconfig.cgi, and admin/localdel.cgi...

CVE-2015-8255

CVE-2015-8255 describes a Cross-Site Request Forgery vulnerability in AXIS Communications devices with a Web Interface. The embedded web app does not verify that a request is intentionally submitted by the user, enabling unauthorized state-changing actions. Documented impact includes CSRF-enabled...

CVE-2015-8255: Cross-Site Request Forgery (CSRF)

AXIS Communications products allow CSRF, as demonstrated by admin/pwdgrp.cgi, vaconfig.cgi, and admin/localdel.cgi...

PT-2017-7366

Name of the Vulnerable Software and Affected Versions AXIS Communications products affected versions not specified Description The issue allows for CSRF, as demonstrated by API endpoints such as "admin/pwdgrp.cgi", "vaconfig.cgi", and "admin/local del.cgi". Recommendations At the moment, there is...

CVE-2007-4930: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the AXIS 207W camera allow remote attackers to perform certain actions as administrators via 1 axis-cgi/admin/restart.cgi, 2 the user and sgrp parameters to axis-cgi/admin/pwdgrp.cgi in an add action, or 3 the server parameter to...