4 matches found
PT-2015-4222
Name of the Vulnerable Software and Affected Versions e107 version 2.0 alpha2 Description A cross-site request forgery issue exists in the AdminObserver function, allowing remote attackers to hijack administrator authentication for requests that add users to the administrator group. This is...
PT-2015-3498
Name of the Vulnerable Software and Affected Versions PHPDug version 2.0.0 Description A cross-site request forgery issue exists, allowing remote attackers to hijack administrator authentication for requests that modify credentials. This occurs in the adm/admin edit.php file. Recommendations For...
PT-2013-5877
Name of the Vulnerable Software and Affected Versions Click2Sell Suite module versions 6.x-1.x Description A cross-site request forgery issue allows remote attackers to hijack administrator authentication for requests that delete database information. This is achieved through vectors involving th...
PT-2013-2130
Name of the Vulnerable Software and Affected Versions QNAP VioStor NVR devices with firmware 4.0.3 Description A cross-site request forgery CSRF issue affects the cgi-bin/create user.cgi endpoint, allowing remote attackers to hijack administrator authentication for creating administrative account...