CVE-2011-1682

Multiple cross-site request forgery CSRF vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 create a list or 2 insert cross-site scripting XSS sequences. NOTE: this issue exists because of an incomplete fix for...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the configuration screen in wp-relatedposts.php in the WP Related Posts plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the 1...

CVE-2011-0545

CVE-2011-0545 describes a cross-site request forgery in Symantec LiveUpdate Administrator (LUA) prior to version 2.3. The vulnerability occurs in the adduser.do endpoint via the userRole parameter, allowing a remote attacker to hijack administrator authentication to create new administrative acco...

Mozilla Products Multiple Vulnerabilities March-11 (Windows)

The host is installed with Mozilla Firefox/Seamonkey that are prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvulnwinmar11.nasl 7019 2017-08-29 11:51:27Z teissa $ Mozilla Products Multiple Vulnerabilities March-11 Windows Authors: Antu Sanadi Copyright:...

CVE-2011-0059

Cross-site request forgery CSRF vulnerability in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to hijack the authentication of arbitrary users for requests that were initiated by a plugin and received a 307 redirect to a page on a...

CVE-2011-1104

Multiple cross-site request forgery CSRF vulnerabilities in Mutare EVM allow remote attackers to hijack the authentication of arbitrary users for requests that 1 change a PIN, 2 delete messages, 3 add a delivery address, or 4 change a delivery address...

CVE-2011-0277

HP Power Manager (HPPM)

CVE-2011-0277

Cross-site request forgery CSRF vulnerability in HP Power Manager HPPM 4.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts...

CVE-2011-0650

Cross-site request forgery CSRF vulnerability in Greenbone Security Assistant GSA before 2.0+rc3 allows remote attackers to hijack the authentication of users for requests that send email via an OMP request to OpenVAS Manager. NOTE: this issue can be leveraged to bypass authentication requirement...

CVE-2011-0650

CVE-2011-0650 concerns Greenbone Security Assistant (GSA) prior to 2.0+rc3. The issue is a CSRF vulnerability that allows an attacker to hijack the user’s authenticated session to issue OMP requests to OpenVAS Manager (e.g., sending email). This is tied to exploitation of CVE-2011-0018 via the GS...

CVE-2011-0643

Cross-site request forgery CSRF vulnerability in admin/confusersedit.php in PHP Link Directory phpLD 4.1.0 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via the N action...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in admin/confusersedit.php in PHP Link Directory phpLD 4.1.0 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via the N action...

CVE-2010-3878

Cross-site request forgery CSRF vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.3 before 4.3.0.CP09 allows remote attackers to hijack the authentication of administrators for requests that deploy WAR files...

CVE-2010-3878

Cross-site request forgery CSRF vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.3 before 4.3.0.CP09 allows remote attackers to hijack the authentication of administrators for requests that deploy WAR files...

CVE-2010-4507

Multiple cross-site request forgery CSRF vulnerabilities on the iSpot 2.0.0.0 R1679, and the ClearSpot 2.0.0.0 R1512 and R1786, with firmware 1.9.9.4 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary commands via the cmd parameter in an...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities on the iSpot 2.0.0.0 R1679, and the ClearSpot 2.0.0.0 R1512 and R1786, with firmware 1.9.9.4 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary commands via the cmd parameter in an...

CVE-2010-4507

CVE-2010-4507 affects Clear iSpot / ClearSpot 2.0.0.0 (R1679) and ClearSpot 2.0.0.0 (R1512/R1786) with firmware 1.9.9.4. Trustwave SpiderLabs TWSL2010-008 documents multiple CSRF vulnerabilities in webmain.cgi (act_cmd_result, act_network_set, act_set_wimax_etc_config) and upgrademain.cgi (act_fi...

CVE-2010-3891

Cross-site request forgery CSRF vulnerability in ESAdmin/security.do in the administrator interface in IBM OmniFind Enterprise Edition before 9.1 allows remote attackers to hijack the authentication of administrators for requests that add an administrative user via a saveNewUser action...

CVE-2010-3891

IBM OmniFind Enterprise Edition (before 9.1) is affected by CVE-2010-3891: a Cross-Site Request Forgery in ESAdmin/security.do allows an attacker to perform actions in the administrator context, including adding a new admin user via a saveNewUser request, effectively hijacking administrator authe...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Administrative Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...