PT-2012-6013

Name of the Vulnerable Software and Affected Versions Drupal Commerce Extra Panes module versions 7.x-1.x before 7.x-1.1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that enable or disable a Commerce extra...

PT-2012-6179

Name of the Vulnerable Software and Affected Versions SAMEDIA LandShop version 0.9.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that change account settings. This can lead to unauthorized changes to accou...

PT-2012-2203

Name of the Vulnerable Software and Affected Versions Sentinel plugin version 1.0.0 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of an administrator for requests that trigger snapshots. Recommendations For Sentinel plugin version 1.0.0,...

PT-2012-3638

Name of the Vulnerable Software and Affected Versions RazorCMS versions 1.2.1 and earlier Description A cross-site request forgery issue allows remote attackers to hijack administrator authentication for requests that delete arbitrary web pages via a showcats action in the admin/index.php file...

PT-2012-5919

Name of the Vulnerable Software and Affected Versions Sagem F@ST 2604 version 253180972B Description A cross-site request forgery issue exists, allowing remote attackers to hijack administrator authentication for requests that change the administrator password via the sysPassword parameter...

PT-2012-3242

Name of the Vulnerable Software and Affected Versions SocialCMS version 1.0.2 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of administrators for specific requests. The requests in...

CVE-2012-2999

Multiple cross-site request forgery CSRF vulnerabilities in the web interface in Cerberus FTP Server before 5.0.5.0 allow remote attackers to hijack the authentication of administrators for requests that 1 add a user account or 2 reconfigure the state of the FTP service, as demonstrated by a...

CVE-2012-4448

Cross-site request forgery CSRF vulnerability in wp-admin/index.php in WordPress 3.4.2 allows remote attackers to hijack the authentication of administrators for requests that modify an RSS URL via a dashboardincominglinks edit action...

PT-2012-5406

Name of the Vulnerable Software and Affected Versions WordPress version 3.4.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that modify an RSS URL via a dashboard incoming links edit action. This occurs in t...

CVE-2011-5196: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Systems 2.3.6 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload PHP files...

PT-2012-2173

Name of the Vulnerable Software and Affected Versions Public Knowledge Project Open Journal Systems versions 2.3.6 and earlier Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for requests that upload PHP files,...

PT-2012-4422

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Messaging Security Suite version 7.1-Build Win32 1394 Description A cross-site request forgery issue exists, allowing remote attackers to hijack administrator authentication for creating admin accounts via a saveAuth acti...

PT-2012-1886

Name of the Vulnerable Software and Affected Versions WikkaWiki versions 1.3.1 through 1.3.2 Description A cross-site request forgery issue exists, allowing remote attackers to hijack administrator authentication for requests that remove arbitrary user accounts via a delete operation...

PT-2012-5572

Name of the Vulnerable Software and Affected Versions ZTE ZXDSL 831IIV7.5.0a Z29 OV Description A cross-site request forgery issue allows remote attackers to hijack administrator authentication for requests that change the administrator password via the sysPassword parameter in the...

PT-2012-1330

Name of the Vulnerable Software and Affected Versions SilverStripe versions 2.3.x through 2.3.9 SilverStripe versions 2.4.x through 2.4.3 Description The issue allows remote attackers to bypass the cross-site request forgery CSRF protection mechanism and hijack the authentication of administrator...

PT-2012-1403

Name of the Vulnerable Software and Affected Versions Blue Coat ProxyAV appliance versions prior to 3.2.6.1 Description The issue allows remote attackers to hijack the authentication of administrators for requests that change a password, modify a policy, or restart the device due to multiple...

PT-2012-3654

Name of the Vulnerable Software and Affected Versions Sitecom WLM-2501 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for requests that change the router passphrase via the pskValue parameter in the...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to hijack the authentication of administrators for requests that 1 remove file access restriction via a deletehtaccess action, 2 drop a database via a kill value in a db action, 3 uninstall the...

PT-2012-5308

Name of the Vulnerable Software and Affected Versions Free Realty versions 3.1-0.6 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of administrators for specific requests, including...

PT-2012-4392

Name of the Vulnerable Software and Affected Versions BMC Identity Management Suite version 7.5.00.103 Description A cross-site request forgery issue exists, allowing remote attackers to hijack administrator authentication for password change requests. The issue is related to the...