Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Campus Virtual-LMS allow 1 remote attackers to hijack the authentication of arbitrary users for requests that terminate a session via login/logout.php, and might allow remote attackers to hijack the authentication of certain users via a ...

CVE-2009-2150

CVE-2009-2150 has concrete details: CSRF vulnerabilities in Campus Virtual-LMS. The issues enable remote attackers to hijack the authentication of arbitrary users for requests that terminate a session via login/logout.php, and may also allow hijacking via ADD or DELETE actions to enrolments/step2...

CVE-2009-2129: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in login.php in Elvin 1.2.0 allows remote attackers to hijack the authentication of arbitrary users via a logout action...

CVE-2009-2073

Cross-site request forgery CSRF vulnerability in Linksys WRT160N wireless router hardware 1 and firmware 1.02.2 allows remote attackers to hijack the authentication of other users for unspecified requests via unknown vectors, as demonstrated using administrator privileges and actions...

CVE-2009-2073

Cross-site request forgery CSRF vulnerability in Linksys WRT160N wireless router hardware 1 and firmware 1.02.2 allows remote attackers to hijack the authentication of other users for unspecified requests via unknown vectors, as demonstrated using administrator privileges and actions...

CVE-2009-2005

Cross-site request forgery CSRF vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspecified victims and add new personal agenda items via unknown vectors...

CVE-2008-6832: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Atlassian JIRA Enterprise Edition 3.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...

CVE-2008-6823

Multiple cross-site request forgery CSRF vulnerabilities in the management interface on the A-LINK WL54AP3 and WL54AP2 access points before firmware 1.4.2-eng1 allow remote attackers to hijack the authentication of administrators for requests that 1 modify the network configuration via certain...

CVE-2009-1802

Multiple cross-site request forgery CSRF vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote attackers to hijack the authentication of admins for requests that create a new admin account or have unspecified other impact...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in index.aas in Application Access Server A-A-S 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary programs via a command job, 2 stop services via a setservice job, or 3...

CVE-2009-1464

Multiple cross-site request forgery CSRF vulnerabilities in index.aas in Application Access Server A-A-S 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary programs via a command job, 2 stop services via a setservice job, or 3...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Beltane before 2.3.11 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-1434

Cross-site request forgery CSRF vulnerability in Foswiki before 1.0.5 allows remote attackers to hijack the authentication of arbitrary users for requests that modify pages, change permissions, or change group memberships, as demonstrated by a URL for a 1 save or 2 view script in the SRC attribut...

CVE-2009-1434

Foswiki CSRF (CVE-2009-1434): Affected: Foswiki 1.0.x prior to 1.0.5. Vulnerable vector involves CSRF via URLs in IMG SRC attributes that trigger save/view scripts, enabling an attacker to hijack user sessions to modify pages, change permissions, or alter group memberships. Root cause: insufficie...

CVE-2009-1434: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Foswiki before 1.0.5 allows remote attackers to hijack the authentication of arbitrary users for requests that modify pages, change permissions, or change group memberships, as demonstrated by a URL for a 1 save or 2 view script in the SRC attribut...

CVE-2009-1459

The CVE-2009-1459 issue targets razorCMS with a Cross‑Site Request Forgery vulnerability in versions before 0.4. The flaw allows an attacker to hijack an administrator’s session and perform actions that create a web page containing PHP code, potentially impacting authentication and content integr...

CVE-2008-6744

CVE-2008-6744 describes a Cross-Site Request Forgery (CSRF) in Cybozu products, notably Cybozu Office 6, Cybozu Dezie prior to 6.0(1.0), and Cybozu Garoon 2.0.0 through 2.1.3. The issue allows an attacker to hijack a user’s authenticated session to alter configuration settings when a logged-in us...

CVE-2009-0039

Multiple cross-site request forgery CSRF vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to hijack the authentication of administrators for requests that 1 change the web administration password, 2 upload application...

CVE-2009-0039

Multiple cross-site request forgery CSRF vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to hijack the authentication of administrators for requests that 1 change the web administration password, 2 upload application...

CVE-2009-0039

Apache Geronimo Application Server CSRF vulnerabilities (CVE-2009-0039) affect the web administration console in Geronimo 2.1–2.1.3. The issue allows remote attackers to hijack administrator sessions and perform actions (e.g., change password, upload apps, Shutdown) via forgery. The CVE descripti...