Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Ubercart Bulk Stock Updater module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors related to formAPI...

CVE-2012-2057

Cross-site request forgery CSRF vulnerability in the Ubercart Bulk Stock Updater module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors related to formAPI...

CVE-2012-2061

The CVE-2012-2061 entry affects Drupal's Admin tools module. The underlying issue is CSRF due to not checking tokens in the module, enabling remote attackers to hijack the authentication of unspecified victims via CSRF vectors. The vulnerability description explicitly identifies the token-checkin...

CVE-2012-2996

Cross-site request forgery CSRF vulnerability in saveAccountSubTab.imss in Trend Micro InterScan Messaging Security Suite 7.1-BuildWin321394 allows remote attackers to hijack the authentication of administrators for requests that create admin accounts via a saveAuth action...

PT-2012-3775

Name of the Vulnerable Software and Affected Versions Drupal affected versions not specified Description A cross-site request forgery CSRF issue exists in the Admin tools module, allowing remote attackers to hijack the authentication of victims. This is due to the module not checking tokens...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the ISE Administrator user interface aka the Apache Tomcat interface on Cisco Identity Services Engine ISE 3300 series appliances before 1.1.0.665 Cumulative Patch 1 allow remote attackers to hijack the authentication of administrators,...

CVE-2012-3908

Multiple cross-site request forgery CSRF vulnerabilities in the ISE Administrator user interface aka the Apache Tomcat interface on Cisco Identity Services Engine ISE 3300 series appliances before 1.1.0.665 Cumulative Patch 1 allow remote attackers to hijack the authentication of administrators,...

CVE-2012-2275

Multiple cross-site request forgery CSRF vulnerabilities in TestLink 1.9.3 and earlier allow remote attackers to hijack the authentication of users for requests that add, delete, or modify sensitive information, as demonstrated by changing the administrator's email via an editUser action to...

CVE-2012-0714

Cross-site request forgery CSRF vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database CCMDB, allows remote attackers to...

CVE-2012-2316

Cross-site request forgery CSRF vulnerability in servlet/admin/AuthServlet.java in OpenKM 5.1.7 and other versions before 5.1.8-2 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary code via the script parameter to admin/scripting.jsp...

CVE-2012-1580

Cross-site request forgery CSRF vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to hijack the authentication of unspecified victims for requests that upload files...

CVE-2012-1580

Cross-site request forgery CSRF vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to hijack the authentication of unspecified victims for requests that upload files...

CVE-2012-2316

Cross-site request forgery CSRF vulnerability in servlet/admin/AuthServlet.java in OpenKM 5.1.7 and other versions before 5.1.8-2 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary code via the script parameter to admin/scripting.jsp...

CVE-2012-3256

CVE-2012-3256 is a CSRF vulnerability in HP Business Availability Center (BAC) v8.07 . The issue could allow remote attackers to hijack the authentication of unspecified victims via unknown vectors. Affected product/version: HP BAC 8.07 on Windows and Solaris. Underlying cause is CSRF in the BAC ...

PT-2012-4603

Name of the Vulnerable Software and Affected Versions HP Business Availability Center BAC version 8.07 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of victims. The exact vectors used for the attack are not specified. Recommendations For ...

CVE-2012-4877

Cross-site request forgery CSRF vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts...

CVE-2012-4877

CVE-2012-4877 describes a cross-site request forgery (CSRF) in FlatnuX CMS, affecting version 2011 08.09.2 and earlier. The vulnerability resides in controlcenter.php and enables remote attackers to hijack the authentication of administrators for requests that add new user accounts. The provided ...

PT-2012-5629

Name of the Vulnerable Software and Affected Versions FlatnuX CMS versions 2011 08.09.2 and earlier Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that add user accounts. Recommendations For FlatnuX CMS versions...

CVE-2012-4393

Multiple cross-site request forgery CSRF vulnerabilities in ownCloud before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users for requests that use 1 addBookmark.php, 2 delBookmark.php, or 3 editBookmark.php in bookmarks/ajax/; 4 calendar/delete.php, 5 calendar/edit.php...