PT-2020-7448

Name of the Vulnerable Software and Affected Versions: Cisco Linksys WRT110 affected versions not specified Description: A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests with unspecified impact. The exact vectors used for this exploitation...

PT-2018-17637

Name of the Vulnerable Software and Affected Versions totemomail Encryption Gateway versions prior to 6.0.0 Build 371 Description The issue allows remote attackers to hijack user authentication for various requests, including changing user settings, sending emails, or modifying contact informatio...

PT-2018-17110

Name of the Vulnerable Software and Affected Versions: DODOCOOL DC38 3-in-1 N300 Mini Wireless Range Extend RTN2-AW.GD.R3465.1.20161103 Description: A Cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests that modify settings, potentially leading...

PT-2017-5964

Name of the Vulnerable Software and Affected Versions: IBM Security Identity Manager versions 5.1 through 7.0 Description: A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests, potentially leading to cross-site scripting attacks, web cache...

PT-2017-12717

Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests, including sending manas via a request to "mybonus.php" or adding administrators. Recommendations For...

PT-2017-11432

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.9.2 Description A cross-site request forgery issue allows remote attackers to hijack user authentication for requests, such as changing a private album to public, via a crafted request. Recommendations For versions...

PT-2017-11430

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.9.2 Description A cross-site request forgery issue allows remote attackers to hijack user authentication for requests, specifically to delete permalinks, by crafting a malicious request. Recommendations For versions...

PT-2017-18657

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect for Linux version 3.0 before CP 1531 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests to start an update from any source via a crafted request to...

PT-2017-8717

Name of the Vulnerable Software and Affected Versions Red Hat JBoss BRMS and BPMS version 6 Description A cross-site request forgery issue allows remote attackers to hijack user authentication for requests that modify instances via a crafted web page. Recommendations For Red Hat JBoss BRMS and BP...

PT-2017-17021

Name of the Vulnerable Software and Affected Versions NETGEAR DGN2200 routers versions 10.0.0.20 through 10.0.0.50 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests that perform DNS lookups via the host name parameter to...

PT-2017-8712

Name of the Vulnerable Software and Affected Versions NetApp Snap Creator Framework versions prior to 4.3.0P1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests with unspecified impact. The exact vectors used for the attack are n...

PT-2015-6573

Name of the Vulnerable Software and Affected Versions CiviCRM versions 6.x-1.x before 6.x-1.2 CiviCRM versions 7.x-1.x before 7.x-1.3 Description A cross-site request forgery CSRF issue exists in the private report module, allowing remote attackers to hijack user authentication for requests that...

PT-2015-6579

Name of the Vulnerable Software and Affected Versions Drupal Node Template module affected versions not specified Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack user authentication for requests that delete node templates. This affects users with th...

PT-2015-5687

Name of the Vulnerable Software and Affected Versions Dell SonicWALL Secure Remote Access SRA products with firmware before 7.5.1.0-38sv Dell SonicWALL Secure Remote Access SRA products with firmware 8.x before 8.0.0.1-16sv Description A cross-site request forgery CSRF issue exists in the user...

PT-2015-5842

Name of the Vulnerable Software and Affected Versions CS-Cart version 4.2.4 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests that change a user's password via a request to "profiles-update/". Recommendations For version 4.2.4,...

PT-2014-6450

Name of the Vulnerable Software and Affected Versions Huawei HiLink E3276 versions before V200R002B470D13SP00C00 Huawei HiLink E3236 TCPU versions before V200R002B470D13SP00C00 Huawei HiLink E3236 WebUI versions before V100R007B100D03SP01C03 Huawei E5180s-22 versions before 21.270.21.00.00 Huawei...

PT-2014-3513

Name of the Vulnerable Software and Affected Versions Jolokia versions prior to 1.2.1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests that execute MBeans methods via a crafted web page. Recommendations For versions prior to...

PT-2014-7143

Name of the Vulnerable Software and Affected Versions TYPO3 mm forum extension versions prior to 1.9.3 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for creating posts. Recommendations For versions prior to 1.9.3, update to version 1.9.3...

PT-2014-2678

Name of the Vulnerable Software and Affected Versions WordPress Related Posts plugin versions prior to 2.6.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests that change settings. Recommendations For versions prior to 2.6.2,...

PT-2014-2667

Name of the Vulnerable Software and Affected Versions Digg Digg plugin versions prior to 5.3.5 Description A cross-site request forgery issue allows remote attackers to hijack user authentication for requests that modify settings. Recommendations For versions prior to 5.3.5, update to version 5.3...