CVE-2010-3883

Cross-site request forgery CSRF vulnerability in the Change Group Permissions module in CMS Made Simple 1.7.1 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make permission modifications...

CVE-2010-3464

Cross-site request forgery CSRF vulnerability in admin/managerusers.class.php in SantaFox 2.02, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests, as demonstrated by adding administrative users via the saveadmin action to admin/index.php...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Local Management Interface LMI on the IBM Proventia Network Mail Security System PNMSS appliance with firmware before 2.5.0.2 allow remote attackers to hijack the authentication of administrators for requests that 1 change settings o...

Microsoft Outlook Web Access Crafted POST Request Elevation of Privilege (CVE-2010-3213)

Outlook Web Access OWA is a webmail service of Microsoft Exchange Server 5.0 and later. The web interface of OWA resembles the interface in Microsoft Outlook. An elevation of privilege vulnerability was reported in Microsoft Outlook Web Access. The vulnerability is due to an error in Outlook Web...

CVE-2009-4898

Cross-site request forgery CSRF vulnerability in TWiki before 4.3.2 allows remote attackers to hijack the authentication of arbitrary users for requests that update pages, as demonstrated by a URL for a save script in the ACTION attribute of a FORM element, in conjunction with a call to the submi...

CVE-2010-1325

Cross-site request forgery CSRF vulnerability in the apache2-slms package in SUSE Lifecycle Management Server SLMS 1.0 on SUSE Linux Enterprise SLE 11 allows remote attackers to hijack the authentication of unspecified victims via vectors related to improper parameter quoting. NOTE: some sources...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the apache2-slms package in SUSE Lifecycle Management Server SLMS 1.0 on SUSE Linux Enterprise SLE 11 allows remote attackers to hijack the authentication of unspecified victims via vectors related to improper parameter quoting. NOTE: some sources...

CVE-2009-4981

Multiple cross-site request forgery CSRF vulnerabilities in Photokorn Gallery 1.81 allow remote attackers to hijack the authentication of administrators...

CVE-2009-4981

CVE-2009-4981: Photokorn Gallery 1.81 contains multiple CSRF vulnerabilities that allow remote attackers to hijack administrator sessions. The available documents confirm CSRF as the issue; no further details on root cause, affected modules, or fixes are provided. Exploitation status and remediat...

CVE-2010-2234

Cross-site request forgery CSRF vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication of administrators for direct requests to an installation URL...

CVE-2010-3024

Multiple cross-site request forgery CSRF vulnerabilities in user/main/updateuser in DiamondList 0.1.6, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that 1 change the administrative password or 2 change the site's configuration...

CVE-2010-3024

CVE-2010-3024 affects DiamondList 0.1.6 (and possibly earlier) with a CSRF vulnerability in the admin-facing path user/main/update_user. This allows a remote attacker to hijack administrator authentication and perform actions such as (1) changing the admin password or (2) changing site configurat...

CVE-2009-4942

Technical details (affected versions, root cause, exploit conditions) are not provided in the connected documents. Monitor for updates for additional, verifiable information.

CVE-2010-1971

Cross-site request forgery CSRF vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, a different vulnerability than CVE-2010-1968...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Mahara before 1.0.15, 1.1.x before 1.1.9, and 1.2.x before 1.2.5 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-1668

Multiple cross-site request forgery CSRF vulnerabilities in Mahara before 1.0.15, 1.1.x before 1.1.9, and 1.2.x before 1.2.5 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5....

CVE-2010-2594

The CVE-2010-2594 issue affects InterSect Alliance Snare Agent and Epilog products across Solaris, Windows, Linux/AIX, IRIX and UNIX variants. Description and connected records confirm multiple CSRF vulnerabilities in the web management interface that allow remote attackers to hijack administrato...

CVE-2010-2231

Cross-site request forgery CSRF vulnerability in report/overview/report.php in the quiz module in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to hijack the authentication of arbitrary users for requests that delete quiz attempts via the attemptid parameter...

CVE-2009-4905

Multiple cross-site request forgery CSRF vulnerabilities in index.php in Acc Statistics 1.1 allow remote attackers to hijack the authentication of administrators for requests that change 1 passwords, 2 usernames, and 3 e-mail addresses...