CVE-2012-2728: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Node Hierarchy module 6.x-1.x before 6.x-1.5 for Drupal allow remote attackers to hijack the authentication of administrators for requests that change a node hierarchy position via an 1 up or 2 down action...

PT-2012-4586

Name of the Vulnerable Software and Affected Versions web@all versions prior to the version downloaded on May 30, 2012 Description The issue allows remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information. This can be...

CVE-2012-3231: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in web@all 2.0, as downloaded before May 30, 2012, allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information, as demonstrated by adding a file to execute arbitrary...

PT-2012-4217

Name of the Vulnerable Software and Affected Versions Node Hierarchy module versions 6.x-1.x before 6.x-1.5 for Drupal Description The issue allows remote attackers to hijack the authentication of administrators for requests that change a node hierarchy position via an up or down action. This is...

PT-2012-4218

Name of the Vulnerable Software and Affected Versions SimpleMeta module versions 6.x-1.x before 6.x-2.0 Description The issue allows remote attackers to hijack the authentication of administrators for requests that delete or add a meta tag entry, due to multiple cross-site request forgery CSRF...

PT-2012-4204

Name of the Vulnerable Software and Affected Versions Drupal BrowserID Mozilla Persona module versions 7.x-1.x before 7.x-1.3 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users for requests that login a user to another web...

CVE-2012-2729: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the SimpleMeta module 6.x-1.x before 6.x-2.0 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 delete or 2 add a meta tag entry...

PT-2012-5009

Name of the Vulnerable Software and Affected Versions Drupal Maestro module versions 7.x-1.x before 7.x-1.2 Description The issue allows remote attackers to hijack the authentication of administrators for requests that change workflows or insert cross-site scripting XSS sequences due to multiple...

CVE-2012-3799: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 change workflows or 2 insert cross-site scripting XSS sequences...

CVE-2012-2713: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the BrowserID Mozilla Persona module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that login a user to another web site...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the admin/editor console in Apache Roller before 5.0.1 allow remote attackers to hijack the authentication of admins or editors by leveraging the HTTP POST functionality...

CVE-2012-2380: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the admin/editor console in Apache Roller before 5.0.1 allow remote attackers to hijack the authentication of admins or editors by leveraging the HTTP POST functionality...

Apache Tomcat: Multiple vulnerabilities

Background Apache Tomcat is a Servlet-3.0/JSP-2.2 Container. Description Multiple vulnerabilities have been discovered in Apache Tomcat. Please review the CVE identifiers referenced below for details. Impact The vulnerabilities allow an attacker to cause a Denial of Service, to hijack a session, ...

CVE-2012-2716: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Comment Moderation module 6.x-1.x before 6.x-1.1 for Drupal allows remote attackers to hijack the authentication of administrators for requests that publish comments...

PT-2012-4206

Name of the Vulnerable Software and Affected Versions Drupal Comment Moderation module versions 6.x-1.x before 6.x-1.1 Description A cross-site request forgery issue exists, allowing remote attackers to hijack the authentication of administrators for requests that publish comments. Recommendation...

CVE-2012-2671

The Rack::Cache rubygem 0.3.0 through 1.1 caches Set-Cookie and other sensitive headers, which allows attackers to obtain sensitive cookie information, hijack web sessions, or have other unspecified impact by accessing the cache...

PHP Jobsite v1.36 - Cross Site Scripting Vulnerabilities

Document Title: =============== PHP Jobsite v1.36 - Cross Site Scripting Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=616 Release Date: ============= 2012-06-16 Vulnerability Laboratory ID VL-ID: ==================================== 61...

PT-2012-4131

Name of the Vulnerable Software and Affected Versions Bradford Network Sentry versions prior to 5.3.3 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the administrative interface. These vulnerabilities allow remote attackers to hijack the authentication ...

CVE-2012-2605: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote attackers to hijack the authentication of administrators for requests that 1 insert XSS sequences or 2 send messages to clients...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in password-manager/changePasswords.do in BMC Identity Management Suite 7.5.00.103 allows remote attackers to hijack the authentication of administrators for requests that change passwords...