CVE-2010-5088

CVE-2010-5088 affects SilverStripe: CSRF vulnerabilities in SilverStripe 2.3.x before 2.3.9 and 2.4.x before 2.4.3. Remote attackers could hijack administrator sessions by exploiting destructive controller actions. The initial and connected documents confirm the affected versions and the general ...

WordPress <= 3.4.2 - CSRF

Because of this vulnerability in wp-admin/index.php, the attackers can hijack the authentication of administrators for requests. Solution Update WordPress...

CVE-2012-2080

Cross-site request forgery CSRF vulnerability in the Node Limit Number module before 6.x-1.2 for Drupal allows remote attackers to hijack the authentication of users with the administer node limitnumber permission for requests that delete limits...

CVE-2012-4324

CVE-2012-4324: CSRF in PHPJabbers Vacation Rental Script permits remote attackers to hijack administrator authentication by issuing requests that trigger adding admin accounts via the AdminUsers create action on index.php. The vulnerability detail explicitly identifies the affected software and t...

CVE-2012-4325

CVE-2012-4325 is a CSRF vulnerability in UNP (Utopia News Pro) affecting 1.4.0 and earlier, enabling remote attackers to hijack administrators’ sessions by sending requests that add administrator accounts via upload/users.php. The connected sources confirm the affected product/version and the adm...

CVE-2012-4326

The CVE-2012-4326 entry describes a CSRF vulnerability in AlstraSoft Site Uptime Enterprise, affecting commonsettings.php and potentially impacting version 5.4. The underlying issue allows remote attackers to hijack administrator sessions by exploiting cross-site requests. The linked documents co...

CVE-2012-4280

Multiple cross-site request forgery CSRF vulnerabilities in admin/agenteditor.php in Free Realty 3.1-0.6 allow remote attackers to hijack the authentication of administrators for requests that 1 add an agent via an addagent action or 2 modify an agent...

CVE-2012-4280

Multiple cross-site request forgery CSRF vulnerabilities in admin/agenteditor.php in Free Realty 3.1-0.6 allow remote attackers to hijack the authentication of administrators for requests that 1 add an agent via an addagent action or 2 modify an agent...

CSRF on jmx-console allows invocation of operations on mbeans

Cross-site request forgery CSRF vulnerability in the JMX Console jmx-console in JBoss Enterprise Portal Platform before 5.2.2, BRMS Platform 5.3.0 before roll up patch1, and SOA Platform 5.3.0 allows remote authenticated users to hijack the authentication of arbitrary users for requests that...

CVE-2012-2602

Multiple cross-site request forgery CSRF vulnerabilities in SolarWinds Orion Network Performance Monitor NPM before 10.3.1 allow remote attackers to hijack the authentication of administrators for requests that 1 create user accounts via CreateUserStepContainer actions to...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in home/secretqtn.php in SocketMail Pro 2.2.9 allows remote attackers to hijack the authentication of arbitrary users for requests that change user security questions and answers via an upd action...

CVE-2012-4059

CVE-2012-4059 describes a CSRF vulnerability in SocketMail Pro 2.2.9 affecting the endpoint home/secretqtn.php where an attacker can hijack the authenticated user’s session to change security questions and answers via an upd action. The vulnerability arises from CSRF exposure that allows changing...

CVE-2012-2305

The CVE-2012-2305 issue affects the Drupal Node Gallery contributed module, specifically versions 6.x-3.1 and earlier. The root cause is a Cross-Site Request Forgery (CSRF) vulnerability that allows remote attackers to hijack the authentication of certain users when creating node galleries. The p...

CVE-2012-4053

The CVE-2012-4053 issue affects eZ Publish 4.1–4.6 via the eZOE Flash Player component, described as a Cross-site Request Forgery (CSRF) allowing remote attackers to hijack user authentication via unknown vectors. The provided documents do not specify exact exploitation vectors, affected products...

CVE-2012-3384

Cross-site request forgery CSRF vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-4133

Cross-site request forgery CSRF vulnerability in Moodle 1.9.x before 1.9.11 allows remote attackers to hijack the authentication of unspecified victims for requests that modify an RSS feed in an RSS block...

CVE-2011-4281

CVE-2011-4281 concerns Moodle 2.0.x before 2.0.2, where multiple CSRF flaws allow remote attackers to hijack a user’s session to mark completion of (1) an activity or (2) a course. The connected documents consistently describe the CSRF vector and impact but do not provide concrete patch versions ...

CVE-2011-4298

Multiple cross-site request forgery CSRF vulnerabilities in mod/wiki/ components in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allow remote attackers to hijack the authentication of arbitrary users for requests that modify wiki data...

CVE-2012-2447

Cross-site request forgery CSRF vulnerability in accountmgr/adminupdate.php in the WebAdmin Portal in Netsweeper allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts via an add action...

CVE-2012-0303

Multiple cross-site request forgery CSRF vulnerabilities in Brightmail Control Center in Symantec Message Filter 6.3 allow remote attackers to hijack the authentication of arbitrary users for requests that 1 execute application commands or 2 create admin accounts...