Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in ATutor 2.2 allow remote attackers to hijack the authentication of administrators for requests that 1 create an administrator account via a request to mods/core/users/admins/create.php or 2 create a user account via a request to...

PT-2020-7562

Name of the Vulnerable Software and Affected Versions: Internet TRiLOGI Server affected versions not specified Description: The issue allows a local user to bypass security and create a local user account. Recommendations: At the moment, there is no information about a newer version that contains...

PT-2017-18986

Name of the Vulnerable Software and Affected Versions atmail versions prior to 7.8.0.2 Description The issue allows an attacker to create a user account due to CSRF. Recommendations For versions prior to 7.8.0.2, update to version 7.8.0.2 or later to resolve the issue...

CVE-2007-6708

Multiple cross-site request forgery CSRF vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware allow remote attackers to perform actions as administrators via an arbitrary valid request to an administrative URI, as demonstrated by 1 a Restore Facto...