CVE-2010-4507

CVE-2010-4507 affects Clear iSpot / ClearSpot 2.0.0.0 (R1679) and ClearSpot 2.0.0.0 (R1512/R1786) with firmware 1.9.9.4. Trustwave SpiderLabs TWSL2010-008 documents multiple CSRF vulnerabilities in webmain.cgi (act_cmd_result, act_network_set, act_set_wimax_etc_config) and upgrademain.cgi (act_fi...

CVE-2010-3891

Cross-site request forgery CSRF vulnerability in ESAdmin/security.do in the administrator interface in IBM OmniFind Enterprise Edition before 9.1 allows remote attackers to hijack the authentication of administrators for requests that add an administrative user via a saveNewUser action...

CVE-2010-3891

IBM OmniFind Enterprise Edition (before 9.1) is affected by CVE-2010-3891: a Cross-Site Request Forgery in ESAdmin/security.do allows an attacker to perform actions in the administrator context, including adding a new admin user via a saveNewUser request, effectively hijacking administrator authe...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Administrative Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-3694

Cross-site request forgery CSRF vulnerability in the Horde Application Framework before 3.3.9 allows remote attackers to hijack the authentication of unspecified victims for requests to a preference form...

CVE-2010-3694

CVE-2010-3694 is a CSRF vulnerability in the Horde Application Framework prior to 3.3.9 that can hijack a victim’s authentication for requests to a preference form. Affected product: Horde/ Horde3 (before 3.3.9); root cause: CSRF on the preference form. Impact per CVSS2: partial confidentiality, ...

CVE-2010-3694

Cross-site request forgery CSRF vulnerability in the Horde Application Framework before 3.3.9 allows remote attackers to hijack the authentication of unspecified victims for requests to a preference form...

CVE-2010-0785

Cross-site request forgery CSRF vulnerability in the Administrative Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-4032

Cross-site request forgery CSRF vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP Insight Control for Linux before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-4032

CVE-2010-4032 is a CSRF vulnerability in HP Insight Control Performance Management for Windows, pre-6.2, that could allow remote attackers to hijack user authentication via unknown vectors. The security bulletin indicates HP released v6.2 or later to resolve the issue; apply the update or equival...

CVE-2010-4106

Cross-site request forgery CSRF vulnerability in HP Insight Control for Linux before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-4024

Cross-site request forgery CSRF vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-3989

Cross-site request forgery CSRF vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-3989

Cross-site request forgery CSRF vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP Systems Insight Manager SIM before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-3288

Cross-site request forgery CSRF vulnerability in HP Systems Insight Manager SIM before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Change Group Permissions module in CMS Made Simple 1.7.1 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make permission modifications...

CVE-2010-3884

The CVE-2010-3884 entry applies to CMS Made Simple 1.8.1 and earlier, describing a Cross-site Request Forgery (CSRF) that could allow an attacker to hijack an administrator’s session to reset the administrative password. The connected records confirm the vulnerable component and the general impac...