Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in SquirrelMail 1.4.19 and earlier, and NaSMail before 1.7, allow remote attackers to hijack the authentication of unspecified victims via features such as send message and change preferences, related to 1 functions/mailboxdisplay.php, 2...

CVE-2008-7082

CVE-2008-7082 affects MyBB 1.4.3, where the sensitive my_post_key token is exposed in URLs to moderation.php for actions (mergeposts, split, deleteposts). An attacker can read the token from the HTTP Referer header to bypass CSRF protection and hijack a moderator’s session/authentication. The sou...

CVE-2008-7032

Technical details about CVE-2008-7032 are not publicly available in the provided documents. Monitor for updates from vendors and security feeds to obtain affected products/versions, impact, exploit status, and remediation.

CVE-2008-7032

Web Management Console Cross-site request forgery CSRF vulnerability in the web management console in F5 BIG-IP 9.4.3 allows remote attackers to hijack the authentication of administrators for requests that create new administrators and execute shell commands, as demonstrated using...

CVE-2008-6975

Multiple cross-site request forgery CSRF vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary commands via the pingip parameter; 2 change the administrative credentials via the httpusername and...

CVE-2009-2677

Cross-site request forgery CSRF vulnerability in HP Insight Control Suite For Linux aka ICE-LX before 2.11 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP Insight Control Suite For Linux aka ICE-LX before 2.11 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in apply.cgi in DD-WRT 24 sp1 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary commands via the pingip parameter; 2 change the administrative credentials via the...

CVE-2008-6975

CVE-2008-6975: CSRF vulnerabilities in apply.cgi of DD-WRT 24 sp2 allow remote attackers to hijack administrator sessions by manipulating parameters (ping_ip, http_username/http_passwd, remote_management, and port-forward fields from/to/ip/pro). The issue is linked to a reportedly weak anti-CSRF ...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Collabtive 0.4.8 allow remote attackers to hijack the authentication of administrators for requests that 1 submit or edit a new project, or 2 upload files to a project, or 3 attach files to messages via unknown vectors. NOTE: these issue...

CVE-2008-6949

CVE-2008-6949 affects Collabtive 0.4.8 with multiple CSRF vulnerabilities that let an attacker hijack administrator authentication to perform actions such as submitting or editing a project, uploading files to a project, or attaching files to messages. The issues may be leveraged with other vulne...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijack the authentication of users for unspecified requests via unknown vectors...

CVE-2009-2738

Cross-site request forgery CSRF vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijack the authentication of users for unspecified requests via unknown vectors...

CVE-2009-2738

CVE-2009-2738 is a CSRF vulnerability affecting FreeNAS WebGUI prior to version 0.7RC1. The issue allows an attacker to hijack a user’s authenticated session and perform unspecified actions via forged requests, when the user is logged into the WebGUI, due to CSRF in the web interface. Public docu...

CVE-2008-6905

CVE-2008-6905 affects BabbleBoard 1.1.6, with a CSRF vulnerability in index.php. The issue allows remote authenticated users to hijack administrator authentication to perform admin-page actions such as deleting categories or groups, banning users, or deleting users. Root cause details and explici...

68 Classifieds 4.1 - 'login.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36208/info '68 Classifieds' is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

CVE-2009-2572

Cross-site request forgery CSRF vulnerability in the Fivestar module 5.x-1.x before 5.x-1.14 and 6.x-1.x before 6.x-1.14, a module for Drupal, allows remote attackers to hijack the authentication of arbitrary users for requests that cast votes...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Fivestar module 5.x-1.x before 5.x-1.14 and 6.x-1.x before 6.x-1.14, a module for Drupal, allows remote attackers to hijack the authentication of arbitrary users for requests that cast votes...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Campus Virtual-LMS allow 1 remote attackers to hijack the authentication of arbitrary users for requests that terminate a session via login/logout.php, and might allow remote attackers to hijack the authentication of certain users via a ...

CVE-2009-2150

CVE-2009-2150 has concrete details: CSRF vulnerabilities in Campus Virtual-LMS. The issues enable remote attackers to hijack the authentication of arbitrary users for requests that terminate a session via login/logout.php, and may also allow hijacking via ADD or DELETE actions to enrolments/step2...