Lucene search
+L

484 matches found

Cvelist
Cvelist
added 2012/07/16 10:0 a.m.24 views

CVE-2011-4281

Multiple cross-site request forgery CSRF vulnerabilities in Moodle 2.0.x before 2.0.2 allow remote attackers to hijack the authentication of arbitrary users for requests that mark the completion of 1 an activity or 2 a course...

7.3AI score0.01006EPSS
SaveExploits0References3
CVE
CVE
added 2012/07/11 10:0 a.m.61 views

CVE-2011-4298

The CVE refers to multiple CSRF vulnerabilities in Moodle’s mod/wiki components affecting Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2, allowing remote attackers to hijack authentication for wiki data modification. The root cause is cross-site request forgery within the wiki module. Affected ...

6.8CVSS7.5AI score0.01011EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2012/06/27 10:55 p.m.17 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in web@all 2.0, as downloaded before May 30, 2012, allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information, as demonstrated by adding a file to execute arbitrary...

6.8CVSS8.5AI score0.01531EPSS
SaveExploits3References2Affected Software1
NVD
NVD
added 2012/06/27 12:55 a.m.17 views

CVE-2012-3799

Multiple cross-site request forgery CSRF vulnerabilities in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 change workflows or 2 insert cross-site scripting XSS sequences...

5.1CVSS6.6AI score0.01174EPSS
SaveExploits1References8
CVE
CVE
added 2012/06/09 12:0 a.m.49 views

CVE-2012-2564

Bloxx Web Filtering before 5.0.14 is affected by multiple CSRF vulnerabilities in the administrative interface that allow remote attackers to hijack authentication and perform administrative actions. The underlying issue is Cross-Site Request Forgery in the admin UI, with potential for informatio...

6.8CVSS7.3AI score0.00774EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2012/06/04 7:55 p.m.32 views

CVE-2011-2085

Multiple cross-site request forgery CSRF vulnerabilities in Best Practical Solutions RT before 3.8.12 and 4.x before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users...

6.8CVSS5.9AI score0.0107EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2012/03/19 9:0 p.m.25 views

CVE-2012-1236

Multiple cross-site request forgery CSRF vulnerabilities in Janetter before 3.3.0.0 aka 3.3.0 allow remote attackers to hijack the authentication of arbitrary users for requests that 1 tweet, 2 upload an image file, or 3 execute arbitrary commands...

7.9AI score0.00804EPSS
SaveExploits0References5
Prion
Prion
added 2012/02/14 8:55 p.m.14 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in admin/updateuser in Hulihan Amethyst 0.1.5, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that 1 change the administrative password or 2 change the site's configuration...

6.8CVSS8.1AI score0.00778EPSS
SaveExploits1References7Affected Software1
Prion
Prion
added 2012/02/14 12:55 a.m.12 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Mibew Messenger 1.6.4 and earlier allow remote attackers to hijack the authentication of operators for requests that insert cross-site scripting XSS sequences via the 1 address or 2 threadid parameters to operator/ban.php; or 3...

6CVSS6.9AI score0.00893EPSS
SaveExploits1References6Affected Software1
NVD
NVD
added 2012/02/03 4:5 a.m.13 views

CVE-2012-0314

Multiple cross-site request forgery CSRF vulnerabilities on the eAccess Pocket WiFi aka GP02 router before 2.00 with firmware 11.203.11.05.168 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 initialize settings or 2 reboot the device...

6.8CVSS7.4AI score0.00641EPSS
SaveExploits0References5
CVE
CVE
added 2012/01/29 11:0 a.m.61 views

CVE-2011-5074

CVE-2011-5074 refers to multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (SiT!)

6.8CVSS7.4AI score0.01072EPSS
SaveExploits2References4Affected Software1
Positive Technologies
Positive Technologies
added 2011/11/10 12:0 a.m.4 views

PT-2011-40: Multiple CSRF vulnerabilities in Citrix License Administration Console

Positive Research Center has discovered a multiple CSRF vulnerabilities in Citrix License Administration Console. All web interface forms are vulnerable to CSRF attacks. One can exploit these vulnerabilities to change the system configuration. How to fix Update your software up to the latest...

7.1CVSS7.4AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2011/11/10 12:0 a.m.10 views

PT-2011-35: Multiple CSRF vulnerabilities in Citrix XenServer Virtual Switch Controller

Positive Research Center has discovered a multiple CSRF vulnerabilities in Citrix XenServer Virtual Switch Controller. All web interface forms are vulnerable to CSRF attacks. One can exploit these vulnerabilities to change the system configuration. How to fix Update your software up to the latest...

7.1CVSS7.4AI score
SaveExploits0References4
OpenVAS
OpenVAS
added 2011/07/22 12:0 a.m.26 views

IBM WebSphere Application Server < 7.0.0.14 Multiple CSRF Vulnerabilities

IBM WebSphere Application Server is prone to cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

6.8CVSS6.4AI score0.02096EPSS
SaveExploits6References4
zdt
zdt
added 2011/06/11 12:0 a.m.24 views

SEO Ecommerce(Shopping)<= XSRF/CSRF Vulnerabilities

Exploit for php platform in category web applications ===================================================================== . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Exploit Information Disclosure Web :...

7.1AI score
SaveExploits0
Cvelist
Cvelist
added 2011/06/02 8:0 p.m.45 views

CVE-2011-1026

Multiple cross-site request forgery CSRF vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to hijack the authentication of administrators...

7AI score0.02117EPSS
SaveExploits4References8
securityvulns
securityvulns
added 2011/05/30 12:0 a.m.50 views

Vulnerabilities in ADSL modem Callisto 821+

Hello 3APA3A! I want to warn you about security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. These are Predictable Resource Location and Brute Force vulnerabilities. Predictable Resource Location WASC-34: http://192.168.1.1 web server on 80 and 8008 ports. The control...

1.2AI score
SaveExploits0
securityvulns
securityvulns
added 2011/05/30 12:0 a.m.49 views

CSRF vulnerabilities in ADSL modem Callisto 821+

Hello 3APA3A! I want to warn you about security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. These are Cross-Site Request Forgery vulnerabilities. In April I've already drew attention of Ukrtelecom's representative and this modem was bough at Ukrtelecom about multiple...

0.5AI score
SaveExploits0
zdt
zdt
added 2011/05/11 12:0 a.m.31 views

seoPanel (v.2.2.1) Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

7.1AI score
SaveExploits0
NVD
NVD
added 2011/04/13 2:55 p.m.25 views

CVE-2011-0748

Multiple cross-site request forgery CSRF vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack the authentication of administrators for requests that 1 add or 2 edit administrator accounts...

6.8CVSS7.1AI score0.01473EPSS
SaveExploits1References9
Rows per page
Query Builder