Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Brightmail Control Center in Symantec Message Filter 6.3 allow remote attackers to hijack the authentication of arbitrary users for requests that 1 execute application commands or 2 create admin accounts...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in web@all 2.0, as downloaded before May 30, 2012, allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information, as demonstrated by adding a file to execute arbitrary...

CVE-2012-2605

Multiple cross-site request forgery CSRF vulnerabilities in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote attackers to hijack the authentication of administrators for requests that 1 insert XSS sequences or 2 send messages to clients...

CVE-2012-2605

Bradford Network Sentry

CVE-2012-2959

CVE-2012-2959 is a CSRF vulnerability affecting BMC Identity Management Suite v7.5.00.103 (and potentially other versions) in the password-manager/changePasswords.do endpoint. An unauthenticated attacker could trick a logged-in administrator into submitting a request that changes user passwords, ...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the administrative interface in Bloxx Web Filtering before 5.0.14 allow remote attackers to hijack the authentication of administrators for requests that perform administrative actions...

CVE-2012-2564

Bloxx Web Filtering before 5.0.14 is affected by multiple CSRF vulnerabilities in the administrative interface that allow remote attackers to hijack authentication and perform administrative actions. The underlying issue is Cross-Site Request Forgery in the admin UI, with potential for informatio...

CVE-2011-2085

Multiple cross-site request forgery CSRF vulnerabilities in Best Practical Solutions RT before 3.8.12 and 4.x before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users...

CVE-2011-2085

Multiple cross-site request forgery CSRF vulnerabilities in Best Practical Solutions RT before 3.8.12 and 4.x before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users...

CVE-2012-0730

Multiple cross-site request forgery CSRF vulnerabilities in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allow remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2012-0730

Multiple cross-site request forgery CSRF vulnerabilities in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allow remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2012-2003

Cross-site request forgery CSRF vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-3293

Cisco ACS 5.2 Solution Engine contains multiple CSRF vulnerabilities that allow an attacker to hijack administrator sessions by submitting requests that insert XSS sequences (Bug ID CSCtr78143). Reported across several sources (NVD, CVE records, PT Security/PT-2011-26) and historically discussed ...

CVE-2011-3846

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH 6.2.2.7 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2011-3846

CVE-2011-3846 is a CSRF vulnerability in HP System Management Homepage (SMH) 6.2.2.7 that allows remote attackers to hijack administrator sessions and create new admin accounts. Affected component: SMH 6.2.2.7. Impact: partial confidentiality, integrity, and availability affected per CVSS2 vector...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2012-1237

Cross-site request forgery CSRF vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2007-6752

CVE-2007-6752 describes a CSRF vulnerability in Drupal 7.12 and earlier that allows an attacker to hijack the authentication of arbitrary users via requests ending the session on the user/logout URI. The vendor disputes the severity and there is no documented fix in the provided sources; some ref...

CVE-2012-1498

CVE-2012-1498 affects Webfolio CMS 1.1.4 and earlier. The issue is multiple CSRF vulnerabilities that allow remote attackers to hijack administrator authentication through (1) adding an administrator via admin/users/add and (2) modifying a web page via admin/pages/edit/web_page_name. Details spec...