CVE-2019-5971

Cross-site request forgery CSRF vulnerability in Attendance Manager 0.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2019-5963

CVE-2019-5963 describes a Cross-Site Request Forgery vulnerability in the WordPress plugin Zoho SalesIQ (versions 1.0.8 and earlier). The vulnerability allows remote attackers to hijack administrator sessions via unspecified vectors, due to inadequate request verification. Affected product: Zoho ...

CVE-2019-5980

The CVE-2019-5980 entry concerns the WordPress plugin “Related YouTube Videos.” A CSRF vulnerability exists in versions prior to 1.9.9 that can allow remote attackers to hijack administrator authentication via unspecified vectors. Affected product: WordPress Related YouTube Videos plugin (versions

CVE-2019-5968

CVE-2019-5968 affects GROWI up to version 3.4.6. The vulnerability is a Cross-site Request Forgery in the process of updating a user’s basic information, which could allow an attacker to hijack an administrator’s session or perform unintended actions when a logged-in admin visits a malicious page...

CVE-2019-5960

CVE-2019-5960 concerns the WordPress plugin WP Open Graph. The set of connected sources confirms a CSRF vulnerability in WP Open Graph version 1.6.1 and earlier that can allow an attacker to perform unauthorized actions on behalf of an administrator when a logged-in user views a malicious page. T...

PT-2019-17914 · Google · Youtube

Name of the Vulnerable Software and Affected Versions: Related YouTube Videos versions prior to 1.9.9 Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators via unspecified vectors. Recommendations: For versions prior to 1.9.9,...

Cross-site Request Forgery (CSRF)

cumin is vulnerable to cross-site request forgery CSRF. The vulnerability exists through the ability to hijack authentication of cumin users...

polkit: Temporary auth hijacking via PID reuse and non-atomic fork

A vulnerability was found in polkit. When authentication is performed by a non-root user to perform an administrative task, the authentication is temporarily cached in such a way that a local attacker could impersonate the authorized process, thus gaining access to elevated privileges...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Smart Forms 2.6.15 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page...

WordPress 4.0.x < 4.0.14 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the PHPMailer component in the class.phpmailer.php script due to improper handling of sender email addresses. An...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to 1 hijack the authentication of administrators for requests that create a user via a request to...

CVE-2015-4630

Multiple cross-site request forgery CSRF vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to 1 hijack the authentication of administrators for requests that create a user via a request to...

Doorkeeper vulnerable to Cross-site Request Forgery

Cross-site request forgery CSRF vulnerability in doorkeeper before 1.4.1 allows remote attackers to hijack the authentication of unspecified victims for requests that read a user OAuth authorization code via unknown vectors...

CVE-2018-17023

Cross-site request forgery CSRF vulnerability on ASUS GT-AC5300 routers with firmware through 3.0.0.4.38432738 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to startapply.htm...

PT-2018-8986

Name of the Vulnerable Software and Affected Versions WL-330NUL Firmware versions prior to 3.0.0.46 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators via unspecified vectors. Recommendations For versions prior to 3.0.0.46,...

CVE-2014-6046

Multiple cross-site request forgery CSRF vulnerabilities in phpMyFAQ before 2.8.13 allow remote attackers to hijack the authentication of unspecified users for requests that 1 delete active users by leveraging improper validation of CSRF tokens or that 2 delete open questions, 3 activate users, 4...

PT-2018-4271

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 2.8.13 Description The issue allows remote attackers to hijack the authentication of unspecified users for various requests, including deleting active users, deleting open questions, activating users, publishing FAQs...

CVE-2018-10232

Cross-site request forgery CSRF vulnerability in TOPdesk before 8.05.017 June 2018 version and before 5.7.SR9 allows remote attackers to hijack the authentication of authenticated users for requests that can obtain sensitive information via unspecified vectors...

CVE-2018-8925

Cross-site request forgery CSRF vulnerability in admin/user.php in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows remote attackers to hijack the authentication of administrators via the 1 username, 2 password, 3 admin, 4 action, 5 uid, or 6 modifyadmin parameter...

CVE-2018-8925: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in admin/user.php in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows remote attackers to hijack the authentication of administrators via the 1 username, 2 password, 3 admin, 4 action, 5 uid, or 6 modifyadmin parameter...