CVE-2011-5311

CVE-2011-5311 describes a Cross-site request forgery (CSRF) in Wikipad 1.6.0, where requests that modify pages via the data[text] parameter can hijack an administrator’s authenticated session. Affected component: pages.php. Root cause and detailed exploit path are not elaborated beyond the parame...

CVE-2011-5318

CVE-2011-5318 affects diafan.CMS prior to 5.1, with multiple CSRF flaws that could hijack administrator sessions for POSTs to admin/news/saveNEWS_ID/, admin/site/save2/, or admin/usersite/save2/. The connected Red Hat and NVD entries confirm the same description. Root cause: cross-site request fo...

PT-2015-3494

Name of the Vulnerable Software and Affected Versions Argyle Social version 2011-04-26 Description The issue allows remote attackers to hijack the authentication of administrators for requests. This can be achieved through multiple cross-site request forgery CSRF vulnerabilities. Specifically, th...

CVE-2014-8144

Cross-site request forgery CSRF vulnerability in doorkeeper before 1.4.1 allows remote attackers to hijack the authentication of unspecified victims for requests that read a user OAuth authorization code via unknown vectors...

CVE-2011-5284

Cross-site request forgery CSRF vulnerability in the web management interface in httpd/cgi-bin/shutdown.cgi in Smoothwall Express 3.1 and 3.0 SP3 and earlier allows remote attackers to hijack the authentication of administrators for requests that perform a reboot via a request to...

CVE-2011-5284

Cross-site request forgery CSRF vulnerability in the web management interface in httpd/cgi-bin/shutdown.cgi in Smoothwall Express 3.1 and 3.0 SP3 and earlier allows remote attackers to hijack the authentication of administrators for requests that perform a reboot via a request to...

CVE-2014-9395

Multiple cross-site request forgery CSRF vulnerabilities in the Simplelife plugin 1.2 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 simplehoverback, 2 simplehovertext, 3...

CVE-2014-9393

Multiple cross-site request forgery CSRF vulnerabilities in the Post to Twitter plugin 0.7 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 idptttwitterusername or 2 idptttweetprefi...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the TweetScribe plugin 1.1 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the tweetscribeusername parameter in a save action in the...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Twitter LiveBlog plugin 1.1.2 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the mashtlbtwitterusername parameter in the...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the PWGRandom plugin 1.11 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 pwgrandomtitle or 2 pwgrandomcategory paramete...

CVE-2014-9392

Cross-site request forgery CSRF vulnerability in the PictoBrowser pictobrowser-gallery plugin 0.3.1 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the pictoBrowserFlickrUser parameter ...

CVE-2014-9400

Multiple cross-site request forgery CSRF vulnerabilities in the Wp Unique Article Header Image plugin 1.0 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 gtdefaultheader or 2...

CVE-2014-9399

CVE-2014-9399 is a CSRF/XSS vulnerability in WordPress TweetScribe plugin (

CVE-2014-9400

CVE-2014-9400 concerns the WordPress plugin “WP Unique Article Header Image” (version 1.0 and earlier). The connected sources confirm CSRF vulnerabilities that allow an attacker to hijack an administrator’s authentication for requests leading to cross-site scripting (XSS) via the parameters gt_de...

CVE-2014-9396

The CVE-2014-9396 entry concerns WordPress SimpleFlickr plugin versions up to 3.0.3 (and earlier). The vulnerability is a CSRF that can hijack administrator authentication to perform requests that trigger cross‑site scripting via three parameters in simpleFlickr.php (simpleflickr_width, simplefli...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in starnet/index.php in SyndeoCMS 3.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts via a saveuser action...

CVE-2012-1203

Cross-site request forgery CSRF vulnerability in starnet/index.php in SyndeoCMS 3.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts via a saveuser action...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the IP Ban simple-ip-ban plugin 1.2.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 iplist, 2 useragentlist, or 3 redirecturl...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Bird Feeder plugin 1.2.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 user or 2 password parameter in the bird-feeder page to...