CVE-2012-1978

CVE-2012-1978 refers to CSRF vulnerabilities in Simple PHP Agenda 2.2.8 and earlier. The flaws let an attacker remotely hijack administrator authentication to perform privileged actions via crafted requests to: (1) add an administrator (auth/process.php), (2) delete an administrator (auth/admin/a...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution PC4HCS 10.61 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut04596...

CVE-2015-0741

CVE-2015-0741 affects Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) versions down to 10.6(1) and earlier. The issue is multiple cross-site request forgery (CSRF) vulnerabilities (Bug ID CSCut04596) that could allow remote attackers to hijack the authentication of arbitrary users....

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Synametrics Technologies Xeams 4.5 Build 5755 and earlier allow remote attackers to hijack the authentication of administrators for requests that create an 1 SMTP domain or a 2 user via a request to /FrontController; or conduct cross-sit...

CVE-2012-4902

CVE-2012-4902 concerns Template CMS 2.1.1 and earlier. The vulnerability is a CSRF flaw that lets an attacker trick an authenticated administrator into performing unauthorized actions, including adding a new administrator account and potentially triggering code execution through the admin interfa...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco Unified Intelligence Center 10.61 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus28826...

PT-2015-4855 · Cisco · Cisco Unified Intelligence Center

Name of the Vulnerable Software and Affected Versions: Cisco Unified Intelligence Center version 10.61 Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations: For Cisco Unified Intelligence Center version 10.61...

CVE-2015-3141: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Synametrics Technologies Xeams 4.5 Build 5755 and earlier allow remote attackers to hijack the authentication of administrators for requests that create an 1 SMTP domain or a 2 user via a request to /FrontController; or conduct cross-sit...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco Unified Customer Voice Portal CVP 10.51 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut93970...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco MediaSense 10.51 and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu16728...

CVE-2015-0736

Cisco MediaSense is affected by a Cross‑Site Request Forgery (CSRF) vulnerability in version 10.5(1) and earlier. The root cause is insufficient CSRF protections on the web interface, enabling an attacker to hijack the authentication of an authenticated user and perform actions in that user’s con...

CVE-2015-0736

Cross-site request forgery CSRF vulnerability in Cisco MediaSense 10.51 and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu16728...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the TheCartPress eCommerce Shopping Cart aka The Professional WordPress eCommerce Plugin plugin for WordPress before 1.3.9.3 allows remote attackers to hijack the authentication of administrators for requests that conduct directory traversal attack...

CVE-2015-3986

TheCartPress eCommerce Shopping Cart (WordPress plugin) is affected by CVE-2015-3986: CSRF allows remote attackers to hijack administrator sessions via directory traversal through tcp_box_path on the checkout_editor_settings page leading to wp-admin/admin.php. Affected versions: WordPress plugin ...

CVE-2015-2248

Cross-site request forgery CSRF vulnerability in the user portal in Dell SonicWALL Secure Remote Access SRA products with firmware before 7.5.1.0-38sv and 8.x before 8.0.0.1-16sv allows remote attackers to hijack the authentication of users for requests that create bookmarks via a crafted request...

Dell SonicWALL Secure Remote Access Products CVE-2015-2248 Cross Site Request Forgery Vulnerability

Cross-site request forgery CSRF vulnerability in the user portal in Dell SonicWALL Secure Remote Access SRA products with firmware before 7.5.1.0-38sv and 8.x before 8.0.0.1-16sv allows remote attackers to hijack the authentication of users for requests that create bookmarks via a crafted request...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the user portal in Dell SonicWALL Secure Remote Access SRA products with firmware before 7.5.1.0-38sv and 8.x before 8.0.0.1-16sv allows remote attackers to hijack the authentication of users for requests that create bookmarks via a crafted request...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the 1 DataMappingEditorCommands, 2 DatastoreEditorCommands, and 3 IEGEditorCommands servlets in IBM Curam Social Program Management SPM 5.2 SP6 before EP6, 6.0 SP2 before EP26, 6.0.3 before 6.0.3.0 iFix8, 6.0.4 before 6.0.4.5 iFix10, and...

PT-2015-3810

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management SPM versions 5.2 SP6 through 5.2 SP6 before EP6 IBM Curam Social Program Management SPM versions 6.0 SP2 through 6.0 SP2 before EP26 IBM Curam Social Program Management SPM versions 6.0.3 through 6.0.3.0...

CVE-2015-0704

Multiple cross-site request forgery CSRF vulnerabilities in API features in Cisco Unified MeetingPlace 8.61.9 allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus95884...