6 matches found
CVE-2013-5316
Cross-site request forgery CSRF vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via an edit user action to cms/index.php...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via an edit user action to cms/index.php...
CVE-2013-5316
The CVE-2013-5316 entry describes a CSRF vulnerability in RiteCMS 1.0.0 that lets an attacker hijack administrator sessions to perform password changes via an admin action to cms/index.php. The affected component is the RiteCMS 1.0.0 admin password change flow; root cause is inadequate CSRF prote...
CVE-2013-5313
Cross-site request forgery CSRF vulnerability in core/admin/modules/users/update.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify arbitrary user accounts via an edit user action...
CVE-2013-5313: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in core/admin/modules/users/update.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify arbitrary user accounts via an edit user action...
PT-2013-5473
Name of the Vulnerable Software and Affected Versions BigTree CMS versions 4.0 RC2 and earlier Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that modify arbitrary user accounts via an edit user action...