CVE-2007-3416

Multiple cross-site request forgery CSRF vulnerabilities in the administration of 1 polls, 2 profiles, 3 IP bans, and 4 forums in a web-app.org WebAPP 0.8 through 0.9.9.6; and b web-app.net WebAPP 0.9.9.3.3, 0.9.9.3.4, and 2007; allow remote attackers to perform deletions as administrators...

CVE-2007-2160

CVE-2007-2160 concerns Drupal, specifically CSRF vulnerabilities in the Database Administration (dba) module. The issue affects Drupal 4.6.x-, and the 4.7.x-1. series up to 4.7.1.2, allowing remote attackers to perform unauthorized actions as an arbitrary user. The root cause is cross-site reques...

CVE-2006-5116

Multiple cross-site request forgery CSRF vulnerabilities in phpMyAdmin before 2.9.1-rc1 allow remote attackers to perform unauthorized actions as another user by 1 directly setting a token in the URL though dynamic variable evaluation and 2 unsetting arbitrary variables via the REQUEST array,...

CVE-2004-1967

Cross-site request forgery CSRF vulnerabilities in 1 cpforums.php, 2 cpusergroup.php, 3 cpipbans.php, 4 myhome.php, 5 post.php, or 6 moderator.php in Open Bulletin Board OpenBB 1.0.6 and earlier allow remote attackers to execute arbitrary code by including the code in an image tag or a link...