10978 matches found
CVE-2012-4325
Cross-site request forgery CSRF vulnerability in upload/users.php in Utopia News Pro UNP 1.4.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts...
CVE-2012-4326
Cross-site request forgery CSRF vulnerability in commonsettings.php in AlstraSoft Site Uptime Enterprise, possibly 5.4, allows remote attackers to hijack the authentication of administrators...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in PHPJabbers Vacation Rental Script allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a create action in the AdminUsers module to index.php...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in upload/users.php in Utopia News Pro UNP 1.4.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts...
CVE-2012-2097
Cross-site request forgery CSRF vulnerability in the Autosave module 6.x before 6.x-2.10 and 7.x-2.x before 7.x-2.0 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests involving "submitting saved results to a node."...
CVE-2012-4325
Cross-site request forgery CSRF vulnerability in upload/users.php in Utopia News Pro UNP 1.4.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts...
CVE-2012-4326
Cross-site request forgery CSRF vulnerability in commonsettings.php in AlstraSoft Site Uptime Enterprise, possibly 5.4, allows remote attackers to hijack the authentication of administrators...
CVE-2012-2097
Cross-site request forgery CSRF vulnerability in the Autosave module 6.x before 6.x-2.10 and 7.x-2.x before 7.x-2.0 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests involving "submitting saved results to a node."...
CVE-2012-2155: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the CDN2 Video module 6.x for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2012-4324: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in PHPJabbers Vacation Rental Script allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a create action in the AdminUsers module to index.php...
PT-2012-5328
Name of the Vulnerable Software and Affected Versions AlstraSoft Site Uptime Enterprise version 5.4 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of administrators. This occurs due to a vulnerability in the commonsettings.php...
PT-2012-3791
Name of the Vulnerable Software and Affected Versions Drupal ShareThis module versions 7.x-2.x before 7.x-2.3 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of users with administer ShareThis permissions. This occurs via unknown...
CVE-2012-2077: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to hijack the authentication of users with administer sharethis permissions via unknown vectors "outside of the Form API."...
CVE-2012-4325: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in upload/users.php in Utopia News Pro UNP 1.4.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts...
PT-2012-5327
Name of the Vulnerable Software and Affected Versions Utopia News Pro UNP versions 1.4.0 and earlier Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of administrators for requests that add administrator accounts. This is related t...
PT-2012-3805
Name of the Vulnerable Software and Affected Versions Drupal Autosave module versions 6.x before 6.x-2.10 Drupal Autosave module versions 7.x-2.x before 7.x-2.0 Description A cross-site request forgery CSRF issue exists in the Autosave module, allowing remote attackers to hijack the authenticatio...
PT-2012-5326
Name of the Vulnerable Software and Affected Versions PHPJabbers Vacation Rental Script affected versions not specified Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a...
PT-2012-3842
Name of the Vulnerable Software and Affected Versions CDN2 Video module versions 6.x for Drupal Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of victims via unknown vectors. Recommendations For CDN2 Video module version 6.x,...
CVE-2012-4326: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in commonsettings.php in AlstraSoft Site Uptime Enterprise, possibly 5.4, allows remote attackers to hijack the authentication of administrators...
CVE-2012-2080: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Node Limit Number module before 6.x-1.2 for Drupal allows remote attackers to hijack the authentication of users with the administer node limitnumber permission for requests that delete limits...