CVE-2011-2085: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Best Practical Solutions RT before 3.8.12 and 4.x before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users...

CVE-2012-0730

Multiple cross-site request forgery CSRF vulnerabilities in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allow remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2012-0730

Multiple cross-site request forgery CSRF vulnerabilities in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allow remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2012-2003

Cross-site request forgery CSRF vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-3293

Cisco ACS 5.2 Solution Engine contains multiple CSRF vulnerabilities that allow an attacker to hijack administrator sessions by submitting requests that insert XSS sequences (Bug ID CSCtr78143). Reported across several sources (NVD, CVE records, PT Security/PT-2011-26) and historically discussed ...

PT-2012-3718

Name of the Vulnerable Software and Affected Versions HP Insight Management Agents versions prior to 9.0.0.0 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims via unknown vectors. Recommendations For versions prior to 9.0.0.0, update to...

CVE-2011-3846

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH 6.2.2.7 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2011-3846

CVE-2011-3846 is a CSRF vulnerability in HP System Management Homepage (SMH) 6.2.2.7 that allows remote attackers to hijack administrator sessions and create new admin accounts. Affected component: SMH 6.2.2.7. Impact: partial confidentiality, integrity, and availability affected per CVSS2 vector...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2012-1237

Cross-site request forgery CSRF vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2007-6752

CVE-2007-6752 describes a CSRF vulnerability in Drupal 7.12 and earlier that allows an attacker to hijack the authentication of arbitrary users via requests ending the session on the user/logout URI. The vendor disputes the severity and there is no documented fix in the provided sources; some ref...

CVE-2012-1498

CVE-2012-1498 affects Webfolio CMS 1.1.4 and earlier. The issue is multiple CSRF vulnerabilities that allow remote attackers to hijack administrator authentication through (1) adding an administrator via admin/users/add and (2) modifying a web page via admin/pages/edit/web_page_name. Details spec...

CVE-2012-1297

Multiple cross-site request forgery CSRF vulnerabilities in main.php in Contao formerly TYPOlight 2.11.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 delete users via a delete action in the user module, 2 delete news via a delete action in...

CVE-2012-1514

Cross-site request forgery CSRF vulnerability in VMware vShield Manager vSM 1.0.1 before Update 2 and 4.1.0 before Update 2 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2012-0317

Multiple cross-site request forgery CSRF vulnerabilities in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allow remote attackers to hijack the authentication of arbitrary users for requests that modify data via the 1 commenting feature or 2 community script...

CVE-2012-0453

Cross-site request forgery CSRF vulnerability in xmlrpc.cgi in Bugzilla 4.0.2 through 4.0.4 and 4.1.1 through 4.2rc2, when modperl is used, allows remote attackers to hijack the authentication of arbitrary users for requests that modify the product's installation via the XML-RPC API...

CVE-2012-1216

Multiple cross-site request forgery CSRF vulnerabilities in admin.php in PBBoard 2.1.4 allow remote attackers to hijack the authentication of administrators for requests that 1 upload a file via an add action or 2 change the contents of a file via a dit action...

CVE-2012-1227

Multiple cross-site request forgery CSRF vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of admins for requests that 1 modify the admin email address or 2 modify the blog title via a settings action; 3 add a page via an editpage action, or 4 add a...

CVE-2012-1220

CVE-2012-1220 describes a CSRF vulnerability in GAzie 5.20 and earlier, affecting the modules/config/admin_utente.php component. The flaw allows an attacker to hijack the administrator’s authenticated session by issuing requests that change account information via an update action, demonstrated b...