CVE-2017-2273

CVE-2017-2273 affects Buffalo WMR-433 and WMR-433W routers. The vulnerability is a Cross-site Request Forgery (CSRF) in firmware: WMR-433 v1.02 and earlier and WMR-433W v1.40 and earlier. The issue allows remote attackers to hijack administrator authentication via unspecified vectors, potentially...

CVE-2017-9415

CVE-2017-9415 : Subsonic 6.1.1 is affected by a CSRF vulnerability that allows an attacker who knows or guesses a target username to hijack a user’s session and change passwords via requests to the relevant endpoint (userSettings.view). The connected documents confirm the vulnerability type, affe...

Cross site request forgery (csrf)

Chyrp Lite version 2016.04 is vulnerable to a CSRF in the user settings function allowing attackers to hijack the authentication of logged in users to modify account information, including their password...

CVE-2017-1000008

Summary: CVE-2017-1000008 affects Chyrp Lite 2016.04. A CSRF flaw in the user settings function lets an attacker hijack the logged-in user’s session to modify account information, including passwords. The CVSS metrics in the primary entry indicate a high impact (C/H, I/H, A/H) with network access...

CVE-2017-2238

Cross-site request forgery CSRF vulnerability in Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier and Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and earlier and TS-WPTCAM2 firmware version 1.01 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2017-2223

Cross-site request forgery CSRF vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and earlier and TS-WPTCAM2 firmware version 1.01 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2017-2238

CVE-2017-2238 is a CSRF vulnerability in Toshiba Home gateway HEM-GW16A (firmware HEM-GW16A-FW-V1.2.0 and earlier) and HEM-GW26A (firmware HEM-GW26A-FW-V1.2.0 and earlier) that enables remote attackers to hijack administrator authentication via unspecified vectors. The issue is documented in mult...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to delete permalinks via a crafted request...

CVE-2016-7809

Cross-site request forgery CSRF vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows remote attackers to hijack the authentication of logged in user to conduct unintended operations via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows remote attackers to hijack the authentication of logged in user to conduct unintended operations via unspecified vectors...

CVE-2016-7822

Cross-site request forgery CSRF vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows remote attackers to hijack the authentication of a logged in user to perform unintended operations via unspecified vectors...

CVE-2016-7809

Cross-site request forgery CSRF vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows remote attackers to hijack the authentication of logged in user to conduct unintended operations via unspecified vectors...

CVE-2016-4909

CVE-2016-4909 describes a cross-site request forgery (CSRF) vulnerability in Cybozu Garoon, affecting versions 3.0.0 through 4.2.2. The issue allows an attacker to cause a logged-in user to be logged out by triggering a request from a malicious page; the vectors are listed as unspecified in the C...

CVE-2017-9033

Cross-site request forgery CSRF vulnerability in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows remote attackers to hijack the authentication of users for requests to start an update from an arbitrary source via a crafted request to SProtectLinux/scanoptionset.cgi, related to the...

CVE-2017-9033

Cross-site request forgery CSRF vulnerability in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows remote attackers to hijack the authentication of users for requests to start an update from an arbitrary source via a crafted request to SProtectLinux/scanoptionset.cgi, related to the...

CVE-2016-3403

Multiple cross-site request forgery CSRF vulnerabilities in the Admin Console in Zimbra Collaboration before 8.6.0 Patch 8 allow remote attackers to hijack the authentication of administrators for requests that 1 add, 2 modify, or 3 remove accounts by leveraging failure to use of a CSRF token and...

CVE-2016-3403

Zimbra Collaboration Server (Admin Console) vulnerable to multiple CSRF flaws in versions before 8.6.0 Patch 8. CSRF tokens and referer header checks are not enforced, enabling remote attackers to hijack administrator sessions and perform add/modify/remove account actions (bugs 100885/100899). Re...

CVE-2017-8930

CVE-2017-8930 refers to multiple CSRF vulnerabilities in the open-source Simple Invoices 2013.1.beta.8. The issues allow remote attackers to hijack admin authentication and perform privileged actions, including: creating new administrator accounts and taking over the application, creating regular...

CVE-2016-4876

Cross-site request forgery CSRF vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators to execute arbitrary PHP code via unspecified vectors...