PT-2014-5098

Name of the Vulnerable Software and Affected Versions FortiWeb versions prior to 5.2.0 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the web administration console. These vulnerabilities allow remote attackers to hijack the authentication of...

CVE-2014-2190

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Broadcast Access Center for Telco and Wireless aka BAC-TW allows remote attackers to hijack the authentication of arbitrary users for requests that make BAC-TW changes, aka Bug IDs CSCuo23804 and CSCuo26389...

CVE-2014-2916

Cross-site request forgery CSRF vulnerability in the subscription page editor spageedit in phpList before 3.0.6 allows remote attackers to hijack the authentication of administrators via a request to admin/...

CVE-2014-2916

Cross-site request forgery CSRF vulnerability in the subscription page editor spageedit in phpList before 3.0.6 allows remote attackers to hijack the authentication of administrators via a request to admin/...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the web framework in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj81777...

CVE-2014-2186

CVE-2014-2186 concerns Cisco WebEx Meetings Server and is described in Cisco’s advisory as a Cross-Site Request Forgery (CSRF) vulnerability arising from insufficient CSRF protections in the web framework. An unauthenticated, remote attacker could entice a logged-in user to follow a malicious lin...

KLA10291 Multiple vulnerabilities in PaperCut

Multiple serious vulnerabilities have been found in PaperCut. Malicious users can exploit these vulnerabilities to cause denial of service or hijack administrators auth. Below is a complete list of vulnerabilities 1. A CSRF vulnerability can be exploited remotely via unspecified vectors; 2. An...

CVE-2014-2579

Multiple cross-site request forgery CSRF vulnerabilities in XCloner Standalone 3.5 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 change the administrator password via the config task to index2.php or 2 when the enabledbbackup and sqlmem...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in XCloner Standalone 3.5 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 change the administrator password via the config task to index2.php or 2 when the enabledbbackup and sqlmem...

CVE-2014-2579

CVE-2014-2579 describes CSRF vulnerabilities in XCloner Standalone ≤3.5 that allow remote attackers to hijack administrator authentication to perform actions such as changing the admin password via the config task to index2.php, and, when enable_db_backup and sql_mem are enabled, accessing databa...

CVE-2014-2579

Multiple cross-site request forgery CSRF vulnerabilities in XCloner Standalone 3.5 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 change the administrator password via the config task to index2.php or 2 when the enabledbbackup and sqlmem...

CVE-2013-4726

Cross-site request forgery CSRF vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-5954

Multiple cross-site request forgery CSRF vulnerabilities in OpenX 2.8.11 and earlier allow remote attackers to hijack the authentication of administrators for requests that delete 1 users via admin/agency-user-unlink.php, 2 advertisers via admin/advertiser-delete.php, 3 banners via...

CVE-2013-5954: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in OpenX 2.8.11 and earlier allow remote attackers to hijack the authentication of administrators for requests that delete 1 users via admin/agency-user-unlink.php, 2 advertisers via admin/advertiser-delete.php, 3 banners via...

PT-2014-2856

Name of the Vulnerable Software and Affected Versions DDSN Interactive cm3 Acora CMS versions 5.5.0/1b-p1 through 6.0.6/1a Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims via unknown vectors. Recommendations For versions 5.5.0/1b-p1...

CVE-2014-2327

Cross-site request forgery CSRF vulnerability in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to hijack the authentication of users for unspecified commands, as demonstrated by requests that 1 modify binary files, 2 modify configurations, or 3 add arbitrary users...

CVE-2014-2327

CVE-2014-2327 affects Cacti 0.8.7g, 0.8.8b and earlier, introducing a cross-site request forgery (CSRF) vulnerability that can hijack a logged-in user’s authentication to perform actions such as modifying binaries, configurations, or adding users. Root cause: CSRF in the web application’s handlin...

CVE-2014-1615

CVE-2014-1615 describes multiple CSRF vulnerabilities in Carbon Black prior to 4.1.0 that allow remote attackers to hijack administrator sessions for requests such as adding new administrative users via the API (api/user) and perform other unspecified actions. Affected product: Carbon Black; vuln...

CVE-2014-1990

Cross-site request forgery CSRF vulnerability in TopAccess aka the web-based management utility on TOSHIBA TEC e-Studio 232, 233, 282, and 283 devices allows remote attackers to hijack the authentication of administrators for requests that change passwords...

CVE-2014-1990

CVE-2014-1990 corresponds to a cross-site request forgery (CSRF) in Toshiba TEC e‑Studio series TopAccess web management utility (models 232/233/282/283). The root cause is CSRF allowing an attacker to change administrator passwords by tricking a logged-in admin into visiting a malicious page, po...