PT-2016-7010

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.5 Description A cross-site request forgery CSRF issue exists in the wp ajax wp compression test function, located in wp-admin/includes/ajax-actions.php, allowing remote attackers to hijack administrator...

PT-2015-7100

Name of the Vulnerable Software and Affected Versions PLDT SpeedSurf 504AN devices with firmware GAN9.8U26-4-TX-R6B018-PH.EN Kasda KW58293 devices Description A cross-site request forgery CSRF issue exists in the form2WlanSetup.cgi file, allowing remote attackers to hijack administrator...

PT-2015-6537

Name of the Vulnerable Software and Affected Versions Drupal Watchdog Aggregator module affected versions not specified Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for requests that enable or disable monitoring sites...

PT-2015-6534

Name of the Vulnerable Software and Affected Versions Drupal Spider Video Player module affected versions not specified Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for requests that delete videos. Recommendations At...

PT-2015-5828

Name of the Vulnerable Software and Affected Versions ASUS RT-G32 routers versions 2.0.2.6 through 2.0.3.2 Description A cross-site request forgery issue allows remote attackers to hijack administrator authentication for requests that change the administrator password via a request to "start...

PT-2015-4255

Name of the Vulnerable Software and Affected Versions TP-Link TL-WR840N version prior to 3.13.27 build 141120 Description A cross-site request forgery issue exists in the administration console, allowing remote attackers to hijack administrator authentication for requests that change router...

PT-2015-4201

Name of the Vulnerable Software and Affected Versions vBulletin version 4.2.2 Description A cross-site request forgery CSRF issue exists in the Moderator Control Panel, allowing remote attackers to hijack administrator authentication for various actions, including banning or unbanning a user via...

PT-2014-2658

Name of the Vulnerable Software and Affected Versions Belkin N300 F7D7301v1 router Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for requests that modify configuration. This is related to the apply.cgi component...

PT-2014-2650

Name of the Vulnerable Software and Affected Versions Linksys WRT310Nv2 version 2.0.0.1 Description A cross-site request forgery issue affects the apply.cgi component, allowing remote attackers to hijack administrator authentication for requests that modify passwords and remote management ports...

PT-2014-4974

Name of the Vulnerable Software and Affected Versions Huawei E303 modems with software 22.157.18.00.858 Huawei Web UI version 11.010.06.01.858 Description A cross-site request forgery CSRF issue exists in the api/sms/send-sms endpoint of the Web UI, allowing remote attackers to hijack administrat...

PT-2013-1314

Name of the Vulnerable Software and Affected Versions FortiOS versions prior to 4.3.13 FortiOS versions 5.x prior to 5.0.2 Description The issue is related to a lack of authentication check for HTTP requests in the web interface of the FortiOS operating system. This can be exploited by a remote...

PT-2012-5572

Name of the Vulnerable Software and Affected Versions ZTE ZXDSL 831IIV7.5.0a Z29 OV Description A cross-site request forgery issue allows remote attackers to hijack administrator authentication for requests that change the administrator password via the sysPassword parameter in the...

PT-2012-3654

Name of the Vulnerable Software and Affected Versions Sitecom WLM-2501 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for requests that change the router passphrase via the pskValue parameter in the...

PT-2012-2995

Name of the Vulnerable Software and Affected Versions DClassifieds version 0.1 final Description A cross-site request forgery issue exists, allowing remote attackers to hijack administrator authentication for requests that modify account settings, such as the administrator password or email, via...

PT-2011-2433

Name of the Vulnerable Software and Affected Versions Symantec LiveUpdate Administrator versions prior to 2.3 Description A cross-site request forgery issue affects the adduser.do endpoint, allowing remote attackers to hijack administrator authentication for creating new administrative accounts,...