CVE-2020-8424

Cups Easy Purchase & Inventory 1.0 is vulnerable to CSRF that leads to admin account takeover via passwordmychange.php...

CVE-2020-8425

Cups Easy Purchase & Inventory 1.0 is vulnerable to CSRF that leads to admin account deletion via userdelete.php...

CVE-2020-8419

An issue was discovered in Joomla! before 3.9.15. Missing token checks in the batch actions of various components cause CSRF vulnerabilities...

CVE-2020-8419

An issue was discovered in Joomla! before 3.9.15. Missing token checks in the batch actions of various components cause CSRF vulnerabilities...

Cross site request forgery (csrf)

The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu...

CVE-2013-4865

The CVE-2013-4865 entry concerns MiCasaVerde VeraLite firmware 1.5.408. A cross-site request forgery (CSRF) in upgrade_step2.sh could allow a remote attacker to hijack a user’s authenticated session to perform requests that install arbitrary firmware via the squashfs parameter. This vulnerability...

Cross site request forgery (csrf)

Umbraco CMS 8.2.2 allows CSRF to enable/disable or delete user accounts...

CVE-2011-3612

Cross-Site Request Forgery CSRF vulnerability exists in panel.php in UseBB before 1.0.12...

allensolly.com Cross Site Request Forgery vulnerability

Open Bug Bounty ID: OBB-1072279 Security Researcher sardharabadal Helped patch 277 vulnerabilities Received 3 Coordinated Disclosure badges Received 3 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting allensolly.com website...

Cisco IOS XE Software Web UI Cross-Site Request Forgery (cisco-sa-20200108-ios-csrf)

According to its self-reported version, Cisco IOS XE Software is affected by a cross-site request forgery CSRF vulnerability in the web UI due to insufficient CSRF protections. An unauthenticated, remote attacker can exploit this, by persuading a user of the interface to follow a malicious link, ...

Cross site request forgery (csrf)

An issue was discovered in Serpico aka SimplE RePort wrIting and CollaboratiOn tool 1.3.0. It does not use CSRF Tokens to mitigate against CSRF; it uses the Origin header which must match the request origin. This is problematic in conjunction with XSS: one can escalate privileges from User level ...

CVE-2019-18271

OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to a cross-site request forgery that may be introduced on the PI Vision administration site...

CVE-2019-14304

Ricoh SP C250DN 1.06 devices allow CSRF...

CVE-2019-20178

Advisto PEEL Shopping 9.2.1 has CSRF via administrer/utilisateurs.php to delete a user...

CVE-2019-6319

HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A firmware version SWP1FN1912BR or higher have a Cross-Site Request Forgery CSRF vulnerability that could lead to a denial of service DOS or device misconfiguration...

CVE-2019-6320

Certain HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A firmware version SWP1FN1912BR or higher have a Cross-Site Request Forgery CSRF vulnerability that could lead to a denial of service DOS or device misconfiguration...

CVE-2019-6320

Certain HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A firmware version SWP1FN1912BR or higher have a Cross-Site Request Forgery CSRF vulnerability that could lead to a denial of service DOS or device misconfiguration...

Atlassian JIRA < 7.6.1 CSRF vulnerability (JRASERVER-66643)

According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is prior to 7.6.1. Therefore the Jira-importers-plugin in Atlassian Jira allows remote attackers to create new projects and abort an executing external system import via various Cross-sit...

CVE-2019-20077

The Typesetter CMS 5.1 logout functionality is affected by a CSRF vulnerability. The logout function of the admin panel is not protected by any CSRF tokens. An attacker can logout the user using this vulnerability...

CVE-2014-5516

Cross-site request forgery CSRF vulnerability in the Storefront Application in DS Data Systems KonaKart before 7.3.0.0 allows remote attackers to hijack the authentication of administrators for requests that change a user email address via an unspecified GET request...