1893 matches found
CVE-2013-1399
Removed by vendor...
CVE-2013-6188
Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH 7.1 through 7.2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH 7.1 through 7.2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2013-3729
Multiple cross-site request forgery CSRF vulnerabilities in Kasseler CMS before 2 r1232 allow remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the 1 groups parameter in a send action in the sendmail module or 2 query parameter in ...
CVE-2013-2754
Cross-site request forgery CSRF vulnerability in Umisoft UMI.CMS before 2.9 build 21905 allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a request to admin/users/add/user/do/...
PT-2014-3227
Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC versions 9.3.x through 9.3-64.4 Citrix NetScaler Application Delivery Controller ADC versions 10.0 through 10.0-77.5 Citrix NetScaler Application Delivery Controller ADC versions 10.1 throug...
CVE-2014-0336
Cross-site request forgery CSRF vulnerability in the web client in Serena Dimensions CM 12.2 build 7.199.0 allows remote attackers to hijack the authentication of administrators for requests that use the usernewmaster parameter to the adminconsole/ URI...
CVE-2013-6202
Multiple cross-site request forgery CSRF vulnerabilities in HP Service Manager 9.30, 9.31, 9.32, and 9.33 allow remote attackers to hijack the authentication of unspecified victims for requests that 1 insert XSS sequences or 2 execute arbitrary code...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in HP Service Manager 9.30, 9.31, 9.32, and 9.33 allow remote attackers to hijack the authentication of unspecified victims for requests that 1 insert XSS sequences or 2 execute arbitrary code...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Call Detail Records Analysis and Reporting CAR page in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make CAR modifications, aka Bug I...
CVE-2014-0813
Cross-site request forgery CSRF vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to hijack the authentication of arbitrary users for requests that modify settings...
CVE-2014-1915
Multiple cross-site request forgery CSRF vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to hijack the authentication of 1 administrators for requests that change the administrator password via an update action to sw/adminchangepassword.php or 2...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to hijack the authentication of 1 administrators for requests that change the administrator password via an update action to sw/adminchangepassword.php or 2...
CVE-2014-1915
Multiple cross-site request forgery CSRF vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to hijack the authentication of 1 administrators for requests that change the administrator password via an update action to sw/adminchangepassword.php or 2...
CVE-2014-1915
CVE-2014-1915 affects Command School Student Management System 1.06.01 and involves Multiple CSRF vulnerabilities. The described flaws allow remote attackers to hijack admin authentication for password changes via sw/admin_change_password.php and to perform add_topic.php actions (adding a topic o...
PT-2014-4364
Name of the Vulnerable Software and Affected Versions Command School Student Management System version 1.06.01 Description The issue affects the Command School Student Management System, allowing remote attackers to exploit multiple cross-site request forgery CSRF vulnerabilities. This can lead t...
CVE-2013-7320
Cross-site request forgery CSRF vulnerability in D-Link DAP-2253 Access Point Rev. A1 with firmware before 1.30 allows remote attackers to hijack the authentication of administrators for requests that modify configuration settings via unspecified vectors...
CVE-2012-6493
Cross-site request forgery CSRF vulnerability in Rapid7 Nexpose Security Console before 5.5.4 allows remote attackers to hijack the authentication of unspecified victims for requests that delete scan data and sites via a request to data/site/delete...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Rapid7 Nexpose Security Console before 5.5.4 allows remote attackers to hijack the authentication of unspecified victims for requests that delete scan data and sites via a request to data/site/delete...
CVE-2014-1694
Multiple cross-site request forgery CSRF vulnerabilities in 1 CustomerPreferences.pm, 2 CustomerTicketMessage.pm, 3 CustomerTicketProcess.pm, and 4 CustomerTicketZoom.pm in Kernel/Modules/ in Open Ticket Request System OTRS 3.1.x before 3.1.19, 3.2.x before 3.2.14, and 3.3.x before 3.3.4 allow...