CVE-2009-2073

The CVE-2009-2073 entry concerns the Linksys WRT160N family (hardware 1 and firmware 1.02.2). The vulnerability is described as a Cross-site Request Forgery (CSRF) that allows remote attackers to hijack the authentication of other users to perform unspecified requests; the administrator privilege...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Atlassian JIRA Enterprise Edition 3.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspecified victims and add new personal agenda items via unknown vectors...

CVE-2009-2005

Cross-site request forgery CSRF vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspecified victims and add new personal agenda items via unknown vectors...

CVE-2008-6823

Multiple cross-site request forgery CSRF vulnerabilities in the management interface on the A-LINK WL54AP3 and WL54AP2 access points before firmware 1.4.2-eng1 allow remote attackers to hijack the authentication of administrators for requests that 1 modify the network configuration via certain...

Transmission Client Cross Site Request Forgery Vulnerability

This host is installed with Transmission Client and is prone to Cross Site Request Forgery Vulnerability. OpenVAS Vulnerability Test $Id: secpodtransmissioncsrfvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ Transmission Client Cross Site Request Forgery Vulnerability Authors: Sujit Ghosal Copyright...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Transmission 1.5 before 1.53 and 1.6 before 1.61 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2009-1757

Cross-site request forgery CSRF vulnerability in Transmission 1.5 before 1.53 and 1.6 before 1.61 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2009-1757

Cross-site request forgery CSRF vulnerability in Transmission 1.5 before 1.53 and 1.6 before 1.61 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Debian DSA-1802-2 : squirrelmail - several vulnerabilities

Several remote vulnerabilities have been discovered in SquirrelMail, a webmail application. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1578 Cross site scripting was possible through a number of pages which allowed an attacker to steal sensitive...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Vivvo CMS before 4.0.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2008-6801

Cross-site request forgery CSRF vulnerability in Vivvo CMS before 4.0.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Botnet hijack: Researchers dissect Torpig malware operation

Security researchers at University of California, Santa Barbara have broken into the nerve center of the Torpig botnet also called Sinowal or Mebroot to find a ten-day stash of 10,000 bank accounts and credit card numbers worth hundreds of thousands of dollars. During the botnet hijack .pdf, the...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Foswiki before 1.0.5 allows remote attackers to hijack the authentication of arbitrary users for requests that modify pages, change permissions, or change group memberships, as demonstrated by a URL for a 1 save or 2 view script in the SRC attribut...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in TWiki before 4.3.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that update pages, as demonstrated by a URL for a save script in the SRC attribute of an IMG element, a related issue to CVE-2009-1434...

CVE-2009-1339

Cross-site request forgery CSRF vulnerability in TWiki before 4.3.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that update pages, as demonstrated by a URL for a save script in the SRC attribute of an IMG element, a related issue to CVE-2009-1434...

CVE-2009-1339

CVE-2009-1339 describes a CSRF vulnerability in TWiki prior to 4.3.1 where a remote authenticated user can hijack another user’s session for page-update requests (demonstrated via a URL in an IMG SRC attribute). Related entries note this was not fully fixed by prior patches, with CVE-2009-4898 ci...

CVE-2009-1434

Cross-site request forgery CSRF vulnerability in Foswiki before 1.0.5 allows remote attackers to hijack the authentication of arbitrary users for requests that modify pages, change permissions, or change group memberships, as demonstrated by a URL for a 1 save or 2 view script in the SRC attribut...

CVE-2009-1455

Multiple cross-site request forgery CSRF vulnerabilities in WebCollab before 2.50 aka Billy Goat allow remote attackers to hijack the authentication of administrators for requests that change an arbitrary password or have other unspecified impact...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in WebCollab before 2.50 aka Billy Goat allow remote attackers to hijack the authentication of administrators for requests that change an arbitrary password or have other unspecified impact...