10979 matches found
CVE-2012-4391: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in core/ajax/appconfig.php in ownCloud before 4.0.7 allows remote attackers to hijack the authentication of administrators for requests that edit the app configurations...
PT-2012-5365
Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 4.0.7 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that edit the app configurations. Recommendations For versions prior to 4.0.7,...
PT-2012-5576
Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 4.0.5 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of victims via unknown vectors. Recommendations...
CVE-2012-4746
Cross-site request forgery CSRF vulnerability in accessaccount.cgi in ZTE ZXDSL 831IIV7.5.0aZ29OV allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in accessaccount.cgi in ZTE ZXDSL 831IIV7.5.0aZ29OV allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Commerce Reorder module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that add items to the shopping cart...
CVE-2012-2116
Cross-site request forgery CSRF vulnerability in the Commerce Reorder module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that add items to the shopping cart...
CVE-2012-4746
The CVE-2012-4746 issue affects ZTE ZXDSL 831IIV7.5.0a_Z29_OV, specifically a CSRF in accessaccount.cgi that lets remote attackers hijack administrator authentication to change the admin password via the sysPassword parameter. The NVD entry lists a Network attack vector with no authentication and...
CVE-2012-2116
Cross-site request forgery CSRF vulnerability in the Commerce Reorder module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that add items to the shopping cart...
CVE-2012-4746: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in accessaccount.cgi in ZTE ZXDSL 831IIV7.5.0aZ29OV allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter...
PT-2012-5572
Name of the Vulnerable Software and Affected Versions ZTE ZXDSL 831IIV7.5.0a Z29 OV Description A cross-site request forgery issue allows remote attackers to hijack administrator authentication for requests that change the administrator password via the sysPassword parameter in the...
PT-2012-3816
Name of the Vulnerable Software and Affected Versions Drupal Commerce Reorder module versions prior to 7.x-1.1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users for requests that add items to the shopping cart...
CVE-2012-2116: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Commerce Reorder module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that add items to the shopping cart...
CVE-2011-4947: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in e107admin/usersextended.php in e107 before 0.7.26 allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the userinclude parameter...
CVE-2011-5131
Cross-site request forgery CSRF vulnerability in global.php in MyBB before 1.6.5 allows remote attackers to hijack the authentication of a user for requests that change the user's language via the language parameter...
CVE-2011-5131
Cross-site request forgery CSRF vulnerability in global.php in MyBB before 1.6.5 allows remote attackers to hijack the authentication of a user for requests that change the user's language via the language parameter...
PT-2012-2109
Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.6.5 Description A cross-site request forgery issue allows remote attackers to hijack user authentication for requests that change the user's language via the language parameter. Recommendations For versions prior to...
CVE-2011-5131: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in global.php in MyBB before 1.6.5 allows remote attackers to hijack the authentication of a user for requests that change the user's language via the language parameter...
CVE-2012-3309
Cross-site request forgery CSRF vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering aka csrfstatus feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accoun...