PT-2014-2387

Name of the Vulnerable Software and Affected Versions Rapid7 Nexpose Security Console versions prior to 5.5.4 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims for requests that delete scan data and sites via a request to...

CVE-2012-6493: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Rapid7 Nexpose Security Console before 5.5.4 allows remote attackers to hijack the authentication of unspecified victims for requests that delete scan data and sites via a request to data/site/delete...