1788 matches found
WordPress WP Smiley Plugin <= 1.4.1 - CSRF
This vulnerability allows an attacker to hijack the authentication of editors for requests that conduct cross-site scripting XSS attacks via the "s4w-more" parameter to the smilies4wp.php page to wp-admin/options-general.php. Solution Update the plugin...
CVE-2015-2852
Cross-site request forgery CSRF vulnerability in the WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 allows remote attackers to hijack the authentication of administrators...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the setup process in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x before 4.3.13.1, and 4.4.x before 4.4.6.1 allow remote attackers to hijack the authentication of administrators for requests that modify the configurati...
CVE-2015-3902
Multiple cross-site request forgery CSRF vulnerabilities in the setup process in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x before 4.3.13.1, and 4.4.x before 4.4.6.1 allow remote attackers to hijack the authentication of administrators for requests that modify the configurati...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the login page in IBM License Metric Tool 9 before 9.1.0.2 and Endpoint Manager for Software Use Analysis 9 before 9.1.0.2 allows remote attackers to hijack the authentication of arbitrary users via vectors involving a FRAME element...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...
CVE-2012-1978
Multiple cross-site request forgery CSRF vulnerabilities in Simple PHP Agenda 2.2.8 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 add an administrator via a request to auth/process.php, 2 delete an administrator via a request to...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in Simple PHP Agenda 2.2.8 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 add an administrator via a request to auth/process.php, 2 delete an administrator via a request to...
CVE-2012-1978
Multiple cross-site request forgery CSRF vulnerabilities in Simple PHP Agenda 2.2.8 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 add an administrator via a request to auth/process.php, 2 delete an administrator via a request to...
CVE-2012-1978
CVE-2012-1978 refers to CSRF vulnerabilities in Simple PHP Agenda 2.2.8 and earlier. The flaws let an attacker remotely hijack administrator authentication to perform privileged actions via crafted requests to: (1) add an administrator (auth/process.php), (2) delete an administrator (auth/admin/a...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution PC4HCS 10.61 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut04596...
CVE-2015-0741
CVE-2015-0741 affects Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) versions down to 10.6(1) and earlier. The issue is multiple cross-site request forgery (CSRF) vulnerabilities (Bug ID CSCut04596) that could allow remote attackers to hijack the authentication of arbitrary users....
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in Synametrics Technologies Xeams 4.5 Build 5755 and earlier allow remote attackers to hijack the authentication of administrators for requests that create an 1 SMTP domain or a 2 user via a request to /FrontController; or conduct cross-sit...
CVE-2012-4902
CVE-2012-4902 concerns Template CMS 2.1.1 and earlier. The vulnerability is a CSRF flaw that lets an attacker trick an authenticated administrator into performing unauthorized actions, including adding a new administrator account and potentially triggering code execution through the admin interfa...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Cisco Unified Intelligence Center 10.61 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus28826...
PT-2015-4855 · Cisco · Cisco Unified Intelligence Center
Name of the Vulnerable Software and Affected Versions: Cisco Unified Intelligence Center version 10.61 Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations: For Cisco Unified Intelligence Center version 10.61...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Cisco Unified Customer Voice Portal CVP 10.51 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut93970...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Cisco MediaSense 10.51 and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu16728...
CVE-2015-0736
Cisco MediaSense is affected by a Cross‑Site Request Forgery (CSRF) vulnerability in version 10.5(1) and earlier. The root cause is insufficient CSRF protections on the web interface, enabling an attacker to hijack the authentication of an authenticated user and perform actions in that user’s con...