PT-2014-3362

Name of the Vulnerable Software and Affected Versions D-Link DAP-2253 Access Point version prior to 1.30 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that modify configuration settings. Recommendations For...

CVE-2013-4889

Multiple cross-site request forgery CSRF vulnerabilities in index.php in Digital Signage Xibo 1.4.2 allow remote attackers to hijack the authentication of administrators for requests that 1 add a new administrator via the AddUser action or 2 conduct cross-site scripting XSS attacks, as demonstrat...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in user/profile/index.php in Moodle through 2.2.11, 2.3.x before 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 allow remote attackers to hijack the authentication of administrators for requests that delete 1...

PT-2013-5344

Name of the Vulnerable Software and Affected Versions HOTBOX router version 2.1.11 Description A cross-site request forgery CSRF issue exists in the goform/wlanBasicSecurity endpoint, allowing remote attackers to hijack administrator authentication for requests that modify the WiFi Security field...

CVE-2013-2628

Multiple cross-site request forgery CSRF vulnerabilities in action.php in Leed Light Feed, possibly before 1.5 Stable, allow remote attackers to hijack the authentication of administrators for unspecified requests, related to the lack of an anti-CSRF token...

CVE-2013-6883

Cross-site request forgery CSRF vulnerability in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to hijack the authentication of administrators for requests that modify the disk erase technique settings via unspecified vectors...

PT-2013-6148

Name of the Vulnerable Software and Affected Versions HP 2620 switches affected versions not specified Description A cross-site request forgery CSRF issue exists in the html/json.html file, allowing remote attackers to hijack administrator authentication for requests that modify administrative...

PT-2013-4137

Name of the Vulnerable Software and Affected Versions D-Link DIR865L router Rev. A1 with firmware before 1.05b07 Description The issue affects the D-Link DIR865L router, allowing remote attackers to hijack the authentication of administrators. This can be achieved through multiple cross-site...

PT-2013-3878

Name of the Vulnerable Software and Affected Versions Social Sharing Toolkit plugin version 2.1.1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that manipulate plugin settings. Recommendations For Social...

PT-2013-1296

Name of the Vulnerable Software and Affected Versions Junos versions prior to 10.4R13 Junos versions 11.4 before 11.4R7 Junos versions 12.1 before 12.1R6 Junos versions 12.1X44 before 12.1X44-D15 Junos versions 12.1X45 before 12.1X45-D10 Junos versions 12.2 before 12.2R3 Junos versions 12.3 befor...

CVE-2013-3690

CVE-2013-3690 is a CSRF vulnerability in Brickcom devices (FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E and possibly other models) whose firmware 3.1.0.8 and earlier uses the CGI endpoint cgi-bin/users.cgi to add administrators. The issue allows remote attackers to hijack admin au...

PT-2013-5877

Name of the Vulnerable Software and Affected Versions Click2Sell Suite module versions 6.x-1.x Description A cross-site request forgery issue allows remote attackers to hijack administrator authentication for requests that delete database information. This is achieved through vectors involving th...

CVE-2013-5316

Cross-site request forgery CSRF vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via an edit user action to cms/index.php...

PT-2013-5473

Name of the Vulnerable Software and Affected Versions BigTree CMS versions 4.0 RC2 and earlier Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that modify arbitrary user accounts via an edit user action...

PT-2013-1314

Name of the Vulnerable Software and Affected Versions FortiOS versions prior to 4.3.13 FortiOS versions 5.x prior to 5.0.2 Description The issue is related to a lack of authentication check for HTTP requests in the web interface of the FortiOS operating system. This can be exploited by a remote...

PT-2013-2130

Name of the Vulnerable Software and Affected Versions QNAP VioStor NVR devices with firmware 4.0.3 Description A cross-site request forgery CSRF issue affects the cgi-bin/create user.cgi endpoint, allowing remote attackers to hijack administrator authentication for creating administrative account...

PT-2013-3151

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.4.7 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for creating arbitrary PHP files. Recommendations For versions prior to 2.4.7, update t...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Sitecom WLM-2501 allow remote attackers to hijack the authentication of administrators for requests that modify settings for 1 Mac Filtering via admin/formFilter, 2 IP/Port Filtering via formFilter, 3 Port Forwarding via formPortFw, 4...

PT-2013-1982

Name of the Vulnerable Software and Affected Versions DiY-CMS version 1.0 Description A cross-site request forgery issue exists, allowing remote attackers to hijack administrator authentication for requests that create a poll via an add action to the poll module. Recommendations For DiY-CMS versi...

PT-2013-1942

Name of the Vulnerable Software and Affected Versions e107 version 1.0.1 Description A cross-site request forgery issue allows remote attackers to hijack administrator authentication for requests that conduct XSS attacks via the news title parameter in a create action. Recommendations For e107...