CVE-2011-5226

Cross-site request forgery CSRF vulnerability in wordpresssentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to hijack the authentication of an administrator for requests that trigger snapshots...

CVE-2011-5223

Cross-site request forgery CSRF vulnerability in logout.php in Cacti before 0.8.7i allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in logout.php in Cacti before 0.8.7i allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-5223

Cross-site request forgery CSRF vulnerability in logout.php in Cacti before 0.8.7i allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in wordpresssentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to hijack the authentication of an administrator for requests that trigger snapshots...

CVE-2011-5223

Cross-site request forgery CSRF vulnerability in logout.php in Cacti before 0.8.7i allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-1900

CVE-2012-1900 affects RazorCMS 1.2.1 and earlier. The vulnerability is a Cross-Site Request Forgery in admin/index.php that lets remote attackers hijack an administrator’s session to perform showcats actions that delete arbitrary web pages. Root cause: CSRF in the admin interface enabling unautho...

CVE-2012-4773

Multiple cross-site request forgery CSRF vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information, as demonstrated by adding an administrator account via an add action to...

PT-2012-5584

Name of the Vulnerable Software and Affected Versions Subrion CMS versions prior to 2.2.3 Description The issue allows remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information. This can be demonstrated by adding an administrato...

CVE-2012-4002

Cross-site request forgery CSRF vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in webconfig/adminpasswd/passwd.html/adminpasswd in Xavi X7968 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysUserName, sysPassword, and sysCfmPwd parameters...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrator accounts via a membernew action to myadmin/admin1members.php or 2 modify the default site title via a save action...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in redpass.cgi in D-Link DSL-2640B Firmware EU4.00 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter...

CVE-2012-5320

CVE-2012-5320 : CSRF vulnerability in Sagem F@ST 2604 253180972B, in password.cgi, allows remote attackers to hijack administrator authentication and change the password via the sysPassword parameter. Affected component: password.cgi on Sagem F@ST 2604 series. Root cause: CSRF enabling password c...

CVE-2012-1416

The CVE-2012-1416 entry concerns CSRF flaws in SocialCMS 1.0.2 that allow an attacker to hijack administrator sessions by triggering (1) member_new to create admin accounts or (2) saving a new site title via admin interfaces. Affected software: SocialCMS 1.0.2; impact described as unauthorized ad...

CVE-2012-5308

Cross-site request forgery CSRF vulnerability in servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 allows remote attackers to hijack the authentication of arbitrary users for requests that create problem reports via a getReportProblem upload action...

CVE-2012-5308

Cross-site request forgery CSRF vulnerability in servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 allows remote attackers to hijack the authentication of arbitrary users for requests that create problem reports via a getReportProblem upload action...

CVE-2012-1414

Cross-site request forgery CSRF vulnerability in manager/news.php in Plume CMS 1.2.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that create News pages via a publish action...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in manager/news.php in Plume CMS 1.2.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that create News pages via a publish action...

CVE-2012-1414

The CVE-2012-1414 entry relates to a Cross-site request forgery (CSRF) vulnerability in Plume CMS, specifically in the file manager/news.php for version 1.2.4 and earlier. The issue allows remote attackers to hijack the authentication of administrators when performing publish actions that create ...