Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Stream Video Player plugin 1.4.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Content Slide plugin 1.4.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...

CVE-2013-2708

The CVE-2013-2708 entry concerns the Content Slide WordPress plugin (v1.4.2). A CSRF vulnerability could allow remote attackers to hijack administrator authentication to perform unauthorized changes to plugin settings via unspecified vectors. Documented impact is the ability to trigger changes wi...

CVE-2013-2708

Cross-site request forgery CSRF vulnerability in the Content Slide plugin 1.4.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...

PT-2014-2622

Name of the Vulnerable Software and Affected Versions Content Slide plugin version 1.4.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that change plugin settings. Recommendations For Content Slide plugin...

CVE-2013-2699

The CVE-2013-2699 entry concerns the WordPress underConstruction plugin (versions before 1.09). The vulnerability is a CSRF flaw that allows an attacker to hijack administrator authentication to deactivate the plugin via unspecified vectors, potentially disabling protection for the site. Affected...

CVE-2013-3252

CVE-2013-3252 affects the WP-PostViews WordPress plugin; the CSRF flaw is in the options admin page, allowing an attacker to hijack administrator authentication and change plugin settings. Affected versions are WP-PostViews before 1.63 (and related entries reference settings manipulation). The ro...

CVE-2014-2115

Multiple cross-site request forgery CSRF vulnerabilities in CERUserServlet pages in Cisco Emergency Responder ER 8.6 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun24250...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in CERUserServlet pages in Cisco Emergency Responder ER 8.6 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun24250...

CVE-2014-2115

CVE-2014-2115 affects Cisco Emergency Responder (ER) CERUserServlet pages in ER 8.6 and earlier. The root cause is insufficient CSRF protections, enabling unauthenticated, remote attackers to abuse an authenticated user’s session to perform unauthorized actions. Impact is session hijacking via CS...

CVE-2014-2115

Multiple cross-site request forgery CSRF vulnerabilities in CERUserServlet pages in Cisco Emergency Responder ER 8.6 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun24250...

CVE-2014-2340

Cross-site request forgery CSRF vulnerability in the XCloner plugin before 3.1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that create website backups via a request to wp-admin/plugins.php...

CVE-2014-2340

The CVE-2014-2340 vulnerability affects the XCloner WordPress plugin (pre-3.1.1). It is a Cross-Site Request Forgery (CSRF) flaw that lets an attacker hijack an administrator’s session to trigger backup creation via wp-admin/plugins.php. Root cause is insufficient verification of request origin c...

CVE-2013-4240

Multiple cross-site request forgery CSRF vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 add new testimonials via the hms-testimonials-addnew page, 2 add new groups via the...

CVE-2013-7352: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in blogs/admin.php in b2evolution before 4.1.7 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the showstatuses parameter, related to CVE-2013-2945...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to hijack the authentication of arbitrary users...

PT-2014-3919

Name of the Vulnerable Software and Affected Versions IBM Lotus Protector for Mail Security versions 2.8.x through 2.8.0 Description A cross-site request forgery CSRF issue exists in the Admin Web UI, allowing remote authenticated users to hijack the authentication of victims via unknown vectors...

CVE-2013-0299

Multiple cross-site request forgery CSRF vulnerabilities in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allow remote attackers to hijack the authentication of users for requests that 1 change the timezone for the user via the lat and lng parameters to...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the 1 node request management, 2 live management, and 3 user administration components in the console in Puppet Enterprise PE before 2.7.1 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-1399

CVE-2013-1399 affects Puppet Enterprise before 2.7.1, with CSRF vulnerabilities in the console’s node request management, live management, and user administration components. The flaws may allow remote attackers to hijack authentication of unspecified victims via unknown vectors. The NVD describe...