CVE-2013-4726

Cross-site request forgery CSRF vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-5954

Multiple cross-site request forgery CSRF vulnerabilities in OpenX 2.8.11 and earlier allow remote attackers to hijack the authentication of administrators for requests that delete 1 users via admin/agency-user-unlink.php, 2 advertisers via admin/advertiser-delete.php, 3 banners via...

CVE-2014-2327

CVE-2014-2327 affects Cacti 0.8.7g, 0.8.8b and earlier, introducing a cross-site request forgery (CSRF) vulnerability that can hijack a logged-in user’s authentication to perform actions such as modifying binaries, configurations, or adding users. Root cause: CSRF in the web application’s handlin...

CVE-2014-1615

CVE-2014-1615 describes multiple CSRF vulnerabilities in Carbon Black prior to 4.1.0 that allow remote attackers to hijack administrator sessions for requests such as adding new administrative users via the API (api/user) and perform other unspecified actions. Affected product: Carbon Black; vuln...

CVE-2014-1990

Cross-site request forgery CSRF vulnerability in TopAccess aka the web-based management utility on TOSHIBA TEC e-Studio 232, 233, 282, and 283 devices allows remote attackers to hijack the authentication of administrators for requests that change passwords...

CVE-2014-1990

CVE-2014-1990 corresponds to a cross-site request forgery (CSRF) in Toshiba TEC e‑Studio series TopAccess web management utility (models 232/233/282/283). The root cause is CSRF allowing an attacker to change administrator passwords by tricking a logged-in admin into visiting a malicious page, po...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Content Slide plugin 1.4.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Stream Video Player plugin 1.4.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...

CVE-2013-2708

The CVE-2013-2708 entry concerns the Content Slide WordPress plugin (v1.4.2). A CSRF vulnerability could allow remote attackers to hijack administrator authentication to perform unauthorized changes to plugin settings via unspecified vectors. Documented impact is the ability to trigger changes wi...

CVE-2013-2708

Cross-site request forgery CSRF vulnerability in the Content Slide plugin 1.4.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...

CVE-2013-2699

The CVE-2013-2699 entry concerns the WordPress underConstruction plugin (versions before 1.09). The vulnerability is a CSRF flaw that allows an attacker to hijack administrator authentication to deactivate the plugin via unspecified vectors, potentially disabling protection for the site. Affected...

CVE-2013-3252

CVE-2013-3252 affects the WP-PostViews WordPress plugin; the CSRF flaw is in the options admin page, allowing an attacker to hijack administrator authentication and change plugin settings. Affected versions are WP-PostViews before 1.63 (and related entries reference settings manipulation). The ro...

CVE-2014-2115

Multiple cross-site request forgery CSRF vulnerabilities in CERUserServlet pages in Cisco Emergency Responder ER 8.6 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun24250...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in CERUserServlet pages in Cisco Emergency Responder ER 8.6 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun24250...

CVE-2014-2115

CVE-2014-2115 affects Cisco Emergency Responder (ER) CERUserServlet pages in ER 8.6 and earlier. The root cause is insufficient CSRF protections, enabling unauthenticated, remote attackers to abuse an authenticated user’s session to perform unauthorized actions. Impact is session hijacking via CS...

CVE-2014-2115

Multiple cross-site request forgery CSRF vulnerabilities in CERUserServlet pages in Cisco Emergency Responder ER 8.6 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun24250...

CVE-2014-2340

Cross-site request forgery CSRF vulnerability in the XCloner plugin before 3.1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that create website backups via a request to wp-admin/plugins.php...

CVE-2014-2340

The CVE-2014-2340 vulnerability affects the XCloner WordPress plugin (pre-3.1.1). It is a Cross-Site Request Forgery (CSRF) flaw that lets an attacker hijack an administrator’s session to trigger backup creation via wp-admin/plugins.php. Root cause is insufficient verification of request origin c...

CVE-2013-4240

Multiple cross-site request forgery CSRF vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 add new testimonials via the hms-testimonials-addnew page, 2 add new groups via the...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to hijack the authentication of arbitrary users...