CVE-2013-5471

Cisco GSS (Global Site Selector) web framework is affected by a Cross-site request forgery (CSRF) vulnerability (CVE-2013-5471). The issue allows an unauthenticated, remote attacker to hijack the authentication of a user by enticing them to follow a crafted link, enabling the attacker to submit a...

PT-2013-5561

Name of the Vulnerable Software and Affected Versions Cisco Global Site Selector GSS affected versions not specified Description A cross-site request forgery CSRF issue in the web framework of Cisco Global Site Selector GSS allows remote attackers to hijack the authentication of arbitrary users...

CVE-2013-3583

Cross-site request forgery CSRF vulnerability in saveProperties.html in Corporater EPM Suite allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords...

PT-2013-4103

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS versions 6.1 before 6.1.0.47 IBM WebSphere Application Server WAS versions 7.0 before 7.0.0.31 IBM WebSphere Application Server WAS versions 8.0 before 8.0.0.7 IBM WebSphere Application Server WAS versions...

CVE-2013-5316

The CVE-2013-5316 entry describes a CSRF vulnerability in RiteCMS 1.0.0 that lets an attacker hijack administrator sessions to perform password changes via an admin action to cms/index.php. The affected component is the RiteCMS 1.0.0 admin password change flow; root cause is inadequate CSRF prote...

CVE-2013-3253

Cross-site request forgery CSRF vulnerability in admin/setting.php in the Xhanch - My Twitter plugin before 2.7.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change unspecified settings...

CVE-2013-3253

Cross-site request forgery CSRF vulnerability in admin/setting.php in the Xhanch - My Twitter plugin before 2.7.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change unspecified settings...

CVE-2013-3992

CVE-2013-3992 is an CSRF vulnerability in IBM InfoSphere BigInsights 2.0–2.1. The IBM advisory lists affected platforms as BigInsights v1.1–2.1 (Linux shown) and provides remediation via the 2.1 Fix Pack (2.1.0.1). Other fixes include contacting support for older versions (1.1–2.0). The vulnerabi...

CVE-2013-3450

Cisco Unified Communications Manager's User WebDialer is affected by CVE-2013-3450, a CSRF vulnerability caused by insufficient CSRF protections. An unauthenticated, remote attacker could exploit this to hijack a user’s authenticated session and initiate dialed calls on behalf of the affected use...

PT-2013-4403

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager Unified CM affected versions not specified Description A cross-site request forgery CSRF issue in the User WebDialer page allows remote attackers to hijack the authentication of arbitrary users for requests...

CVE-2013-4671

Cross-site request forgery CSRF vulnerability in the management console on the Symantec Web Gateway SWG appliance before 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-4871

Cross-site request forgery CSRF vulnerability in the TEQneers SEO Enhancements tqseo extension before 5.0.1 for TYPO3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-3420

Cross-site request forgery CSRF vulnerability in the web framework on the Cisco Identity Services Engine ISE allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuh25506...

CVE-2013-4871

CVE-2013-4871 affects the TEQneers SEO Enhancements (tq_seo) extension for TYPO3, specifically versions prior to 5.0.1. The vulnerability is a Cross-site Request Forgery (CSRF) that could allow remote attackers to hijack user authentication via unknown vectors. The vulnerability originates in the...

PT-2013-5248

Name of the Vulnerable Software and Affected Versions TEQneers SEO Enhancements tq seo extension versions prior to 5.0.1 for TYPO3 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of victims. The exact vectors used for the attack are not...

CVE-2013-3420

Cross-site request forgery CSRF vulnerability in the web framework on the Cisco Identity Services Engine ISE allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuh25506...

PT-2013-4377

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE affected versions not specified Description A cross-site request forgery CSRF issue in the web framework allows remote attackers to hijack the authentication of arbitrary users. Recommendations At the moment,...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Sharebar plugin 1.2.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 add or 2 modify buttons, or 3 insert cross-site scripting XSS sequences...

PT-2013-4429

Name of the Vulnerable Software and Affected Versions Sharebar plugin version 1.2.5 Description The issue allows remote attackers to hijack the authentication of administrators for requests, including adding or modifying buttons, or inserting cross-site scripting sequences, due to multiple...

CVE-2013-3424

Cross-site request forgery CSRF vulnerability in Administration and View pages in Cisco Secure Access Control System ACS allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCud75177...