CVE-2015-5397

The CVE-2015-5397 entry corresponds to a Joomla! CSRF flaw affecting Joomla! 3.2.0–3.3.x and 3.4.x before 3.4.2 that enables remote attackers to hijack user authentication for requests that upload code via unknown vectors. The root cause is insufficient CSRF protection in core actions, allowing e...

CVE-2015-4258

Cross-site request forgery CSRF vulnerability on Cisco TelePresence MSE 8000 devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90444...

CVE-2015-4255

Cross-site request forgery CSRF vulnerability on Cisco TelePresence IP Gateway devices with software 2.03.34 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90734...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Cisco TelePresence IP Gateway devices with software 2.03.34 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90734...

CVE-2015-4252

Cross-site request forgery CSRF vulnerability on Cisco TelePresence ISDN Gateway devices with software 2.21.106 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90724...

CVE-2015-4256

Cross-site request forgery CSRF vulnerability on Cisco TelePresence IP VCR devices with software 3.01.27 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90736...

PT-2015-1630

Name of the Vulnerable Software and Affected Versions Cisco TelePresence ISDN Gateway version 2.21.106 Description The issue is related to a cross-site request forgery CSRF vulnerability, which allows remote attackers to hijack the authentication of arbitrary users. This means an attacker could...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco FireSIGHT System Software 5.4.1.2 and 6.0.0 in FireSIGHT Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu94721...

CVE-2015-4242

Cross-site request forgery CSRF vulnerability in Cisco FireSIGHT System Software 5.4.1.2 and 6.0.0 in FireSIGHT Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu94721...

PT-2015-6478

Name of the Vulnerable Software and Affected Versions Cisco FireSIGHT System Software versions 5.4.1.2 through 6.0.0 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations For versions 5.4.1.2 through 6.0.0, update t...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention DLP before 12.5.2 allows remote attackers to hijack the authentication of administrators...

CVE-2014-6198

IBM Security Network Protection is affected by CVE-2014-6198, a Cross‑Site Request Forgery (CSRF) flaw in 5.3 before 5.3.1 that could allow a remote attacker to hijack an authenticated user’s session by luring them to a malicious page. The issue arises from improper validation of user‑supplied in...

CVE-2015-4586

Cross-site request forgery CSRF vulnerability in Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL with firmware 1.0.0.20h.HOL allows remote attackers to hijack the authentication of administrators for requests that create a user account via an adduser action in a request to password.cmd...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL with firmware 1.0.0.20h.HOL allows remote attackers to hijack the authentication of administrators for requests that create a user account via an adduser action in a request to password.cmd...

CVE-2015-4586

The CVE-2015-4586 entry concerns the Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL router with firmware 1.0.0.20h.HOL. A Cross-Site Request Forgery (CSRF) vulnerability in the device’s web interface can allow an attacker to hijack administrator authentication and perform actions such as creating ...

CVE-2015-4189: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Cisco Data Center Analytics Framework DCAF 1.4 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun26807...

CVE-2015-4140

Cross-site request forgery CSRF vulnerability in the WP Smiley plugin 1.4.1 for WordPress allows remote attackers to hijack the authentication of editors for requests that conduct cross-site scripting XSS attacks via the s4w-more parameter to the smilies4wp.php page to wp-admin/options-general.ph...

Ektron CMS 9.10 SP1 (Build 9.1.0.184.1.114) - CSRF Vulnerability

Exploit for php platform in category web applications Vulnerability type: Cross-site Request Forgery Vendor: http://www.ektron.com/ Product: Ektron Content Management System Affected version: = TIMELINE – 07/04/2015: Vulnerability found – 07/04/2015: Vendor informed – 08/04/2015: Vendor responded...

Ektron CMS 9.10 SP1 (Build 9.1.0.184.1.114) - Cross-Site Request Forgery

Vulnerability type: Cross-site Request Forgery Vendor: http://www.ektron.com/ Product: Ektron Content Management System Affected version: = TIMELINE – 07/04/2015: Vulnerability found – 07/04/2015: Vendor informed – 08/04/2015: Vendor responded and acknowledged - 01/05/2015: MITRE issued CVE...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in ISPConfig before 3.0.5.4p7 allow remote attackers to hijack the authentication of 1 administrators for requests that create an administrator account via a request to admin/usersedit.php or 2 arbitrary users for requests that conduct SQL...