10424 matches found
CVE-2019-15150
In the OAuth2 Client extension before 0.4 for MediaWiki, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callback function...
CVE-2019-15115
The peters-login-redirect plugin before 2.9.2 for WordPress has CSRF...
CVE-2019-15115
The peters-login-redirect plugin before 2.9.2 for WordPress has CSRF...
CVE-2017-18547
The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms...
Cross site request forgery (csrf)
The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan...
Cross site request forgery (csrf)
The companion-auto-update plugin before 3.2.1 for WordPress has CSRF...
CVE-2017-18511
The custom-sidebars plugin before 3.0.8.1 for WordPress has CSRF...
CVE-2017-18510
The custom-sidebars plugin before 3.1.0 for WordPress has CSRF related to set location, import actions, and export actions...
CVE-2018-20967
The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF...
CVE-2017-18510
The custom-sidebars plugin before 3.1.0 for WordPress has CSRF related to set location, import actions, and export actions...
CVE-2016-10883
The simple-add-pages-or-posts plugin before 1.7 for WordPress has CSRF for deleting users...
Dolibarr ERP/CRM Cross-Site Request Forgery Vulnerability (CNVD-2019-41857)
Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site request forgery vulnerability in the Label field ...
PT-2019-7681 · WordPress · Wp Editor
Name of the Vulnerable Software and Affected Versions: wp-editor plugin versions prior to 1.2.6 Description: The issue concerns a CSRF problem in the wp-editor plugin for WordPress. Recommendations: For versions prior to 1.2.6, update to version 1.2.6 or later to resolve the issue...
CVE-2018-20964
The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF...
OPENSUSE-SU-2019:1861-1 Security update for phpMyAdmin
This update for phpMyAdmin fixes the following issues: phpMyAdmin was updated to 4.9.0.1: Several issues with SYSTEM VERSIONING tables Fixed json encode error in export Fixed JavaScript events not activating on input sql bookmark issue Show Designer combo boxes when adding a constraint Fix edit...
Apache Ranger Cross-Site Request Forgery Vulnerability
Apache Ranger is a set of architectures from the Apache USA Software Foundation that implement comprehensive security measures for Hadoop clusters. The product provides centralized security policy management for core enterprise security requirements such as authorization, billing and data...
PT-2019-7670 · WordPress · Wp-Database-Backup
Name of the Vulnerable Software and Affected Versions: wp-database-backup plugin versions prior to 4.3.3 Description: The issue concerns a CSRF problem in the wp-database-backup plugin for WordPress. Recommendations: For versions prior to 4.3.3, update to version 4.3.3 or later to resolve the iss...
Cross site request forgery (csrf)
Bagisto 0.1.5 allows CSRF under /admin URIs...
U.S. Dept Of Defense: Account takeover through CSRF in http://███████/██████████/default.asp
Summary: Hi team, I have found a CSRF vulnerability in http://██████/████/default.asp that leads to account takeover. Step-by-step Reproduction Instructions 1. Go to http://██████████/████████/default.asp and login 2. Copy the below HTML code 3. Submit the request and see your profile 4. Try to...