Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in admin.php in PBBoard 2.1.4 allow remote attackers to hijack the authentication of administrators for requests that 1 upload a file via an add action or 2 change the contents of a file via a dit action...

PT-2012-2995

Name of the Vulnerable Software and Affected Versions DClassifieds version 0.1 final Description A cross-site request forgery issue exists, allowing remote attackers to hijack administrator authentication for requests that modify account settings, such as the administrator password or email, via...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Wuzly 2.0 allow remote attackers to hijack the authentication of administrators for requests that 1 add an administrator, 2 perform cross-site scripting XSS, 3 perform SQL injection, or have other unspecified impact via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the web console in Zenprise Device Manager 6.x through 6.1.8 allows remote attackers to hijack the authentication of administrators for requests that wipe mobile devices...

CVE-2011-4498: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the web console in Zenprise Device Manager 6.x through 6.1.8 allows remote attackers to hijack the authentication of administrators for requests that wipe mobile devices...

dhtml-menu-builder universal password and XSS cross-site vulnerabilities-vulnerability warning-the black bar safety net

Vulnerability Description: from abroad dhtml-menu-builder Auth bypass and Persistent xss; official website http://dhtml-menu-builder. com/; the system there is a serious background administrator authentication bypass vulnerability, as well asXSScross-site vulnerabilities. Publisher/date:...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in php/partieadministrateur/administration.php in WebJaxe 1.02 allows remote attackers to hijack the authentication of administrators for requests that 1 modify passwords or 2 add new projects. NOTE: some of these details are obtained from third party...

CVE-2011-0760

Multiple cross-site request forgery CSRF vulnerabilities in the configuration screen in wp-relatedposts.php in the WP Related Posts plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the 1...

PT-2011-2433

Name of the Vulnerable Software and Affected Versions Symantec LiveUpdate Administrator versions prior to 2.3 Description A cross-site request forgery issue affects the adduser.do endpoint, allowing remote attackers to hijack administrator authentication for creating new administrative accounts,...

HP Power Manager <= 4.3.2 Multiple Vulnerabilities

HP Power Manager is prone to cross-site request forgery CSRF and cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

PT-2011-2429

Name of the Vulnerable Software and Affected Versions Zikula versions prior to 1.2.5 Description A cross-site request forgery CSRF issue exists in the Users module, allowing remote attackers to hijack administrator authentication for requests that modify account privileges. This is achieved by...

PT-2011-2520

Name of the Vulnerable Software and Affected Versions N-13 News versions 3.4 through 4.0 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for creating new users via the options action in the news/admin.php file...

CVE-2011-0503

Cross-site request forgery CSRF vulnerability in VaM Shop 1.6, 1.6.1, and probably earlier versions allows remote attackers to hijack the authentication of administrators for requests that 1 change user status via admin/customers.php or 2 change user permissions via admin/accounting.php. NOTE: so...

CVE-2010-4507

Multiple cross-site request forgery CSRF vulnerabilities on the iSpot 2.0.0.0 R1679, and the ClearSpot 2.0.0.0 R1512 and R1786, with firmware 1.9.9.4 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary commands via the cmd parameter in an...

PT-2010-5522

Name of the Vulnerable Software and Affected Versions Drupal Views module versions 5.x before 5.x-1.8 Drupal Views module versions 6.x before 6.x-2.11 Description The issue affects the Views UI implementation in the Views module for Drupal, where multiple cross-site request forgery CSRF...

Max CMS2. 0beta (maxcms)SQL injection and administrator authentication bypass vulnerability-vulnerability warning-the black bar safety net

This system was internally very popular video-on-demand system, before 1. 5 version vulnerability very much, the 2.0 version in terms of security has improved, but still there are loopholes exist. Look at the code \inc\ajax. asp dim action : action = getForm"action", "get" response. Charset="gbk"...

CVE-2010-2594

Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5....

CUPS administrator web interface CSRF

Cross-site request forgery CSRF vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings...

CVE-2010-0540

Cross-site request forgery CSRF vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings...

CVE-2010-2294

Cross-site request forgery CSRF vulnerability in Plume CMS 1.2.4 and possibly earlier allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via unspecified vectors...