CVE-2012-4059

CVE-2012-4059 describes a CSRF vulnerability in SocketMail Pro 2.2.9 affecting the endpoint home/secretqtn.php where an attacker can hijack the authenticated user’s session to change security questions and answers via an upd action. The vulnerability arises from CSRF exposure that allows changing...

CVE-2012-2305

The CVE-2012-2305 issue affects the Drupal Node Gallery contributed module, specifically versions 6.x-3.1 and earlier. The root cause is a Cross-Site Request Forgery (CSRF) vulnerability that allows remote attackers to hijack the authentication of certain users when creating node galleries. The p...

CVE-2012-4053

The CVE-2012-4053 issue affects eZ Publish 4.1–4.6 via the eZOE Flash Player component, described as a Cross-site Request Forgery (CSRF) allowing remote attackers to hijack user authentication via unknown vectors. The provided documents do not specify exact exploitation vectors, affected products...

PT-2012-3938

Name of the Vulnerable Software and Affected Versions Node Gallery module for Drupal versions 6.x-3.1 and earlier Description A cross-site request forgery issue allows remote attackers to hijack the authentication of certain users for requests that create node galleries. Recommendations For Node...

PT-2012-5171

Name of the Vulnerable Software and Affected Versions eZ Publish versions 4.1 through 4.6 Description A cross-site request forgery CSRF issue exists in the eZOE flash player component, allowing remote attackers to hijack the authentication of victims via unknown vectors. Recommendations For...

CVE-2012-3384

Cross-site request forgery CSRF vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-4133

Cross-site request forgery CSRF vulnerability in Moodle 1.9.x before 1.9.11 allows remote attackers to hijack the authentication of unspecified victims for requests that modify an RSS feed in an RSS block...

CVE-2011-4281

CVE-2011-4281 concerns Moodle 2.0.x before 2.0.2, where multiple CSRF flaws allow remote attackers to hijack a user’s session to mark completion of (1) an activity or (2) a course. The connected documents consistently describe the CSRF vector and impact but do not provide concrete patch versions ...

CVE-2011-4298

Multiple cross-site request forgery CSRF vulnerabilities in mod/wiki/ components in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allow remote attackers to hijack the authentication of arbitrary users for requests that modify wiki data...

CVE-2012-2447

Cross-site request forgery CSRF vulnerability in accountmgr/adminupdate.php in the WebAdmin Portal in Netsweeper allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts via an add action...

CVE-2012-0303

Multiple cross-site request forgery CSRF vulnerabilities in Brightmail Control Center in Symantec Message Filter 6.3 allow remote attackers to hijack the authentication of arbitrary users for requests that 1 execute application commands or 2 create admin accounts...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Brightmail Control Center in Symantec Message Filter 6.3 allow remote attackers to hijack the authentication of arbitrary users for requests that 1 execute application commands or 2 create admin accounts...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in web@all 2.0, as downloaded before May 30, 2012, allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information, as demonstrated by adding a file to execute arbitrary...

CVE-2012-2605

Multiple cross-site request forgery CSRF vulnerabilities in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote attackers to hijack the authentication of administrators for requests that 1 insert XSS sequences or 2 send messages to clients...

CVE-2012-2605

Bradford Network Sentry

CVE-2012-2959

CVE-2012-2959 is a CSRF vulnerability affecting BMC Identity Management Suite v7.5.00.103 (and potentially other versions) in the password-manager/changePasswords.do endpoint. An unauthenticated attacker could trick a logged-in administrator into submitting a request that changes user passwords, ...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the administrative interface in Bloxx Web Filtering before 5.0.14 allow remote attackers to hijack the authentication of administrators for requests that perform administrative actions...

CVE-2012-2564

Bloxx Web Filtering before 5.0.14 is affected by multiple CSRF vulnerabilities in the administrative interface that allow remote attackers to hijack authentication and perform administrative actions. The underlying issue is Cross-Site Request Forgery in the admin UI, with potential for informatio...

CVE-2011-2085

Multiple cross-site request forgery CSRF vulnerabilities in Best Practical Solutions RT before 3.8.12 and 4.x before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users...

CVE-2011-2085

Multiple cross-site request forgery CSRF vulnerabilities in Best Practical Solutions RT before 3.8.12 and 4.x before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users...