Cross site request forgery (csrf)

cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate the csrftoken parameter, which allows remote attackers to perform cross-site request forgery CSRF attacks...

PT-2013-6135

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions prior to 5.0.5 Description The issue is related to the improper validation of the csrf token parameter in the cgi-bin/module//sysmanager/admin/SYSAdminUserDialog endpoint. This allows remote attackers to perform cross-si...

CVE-2013-6826: Cross-Site Request Forgery (CSRF)

cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate the csrftoken parameter, which allows remote attackers to perform cross-site request forgery CSRF attacks...