PT-2017-11433

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.10 Description A cross-site request forgery issue allows remote attackers to hijack user authentication for requests to unlock albums via a crafted request. Recommendations For versions prior to 2.10, update to versi...

PT-2016-1624

Name of the Vulnerable Software and Affected Versions HP StoreOnce Backup system software versions prior to 3.13.1 Description The issue is related to a cross-site request forgery CSRF vulnerability, which can be exploited by a remote attacker to hijack user authentication during a session. This...

PT-2014-2948

Name of the Vulnerable Software and Affected Versions SimpleRisk versions prior to 20130916-001 Description A cross-site request forgery issue exists, allowing remote attackers to hijack user authentication for requests that add projects via an add project action in the management/prioritize...

PT-2013-1794

Name of the Vulnerable Software and Affected Versions MediaWiki CentralAuth extension versions prior to 1.19.9 MediaWiki CentralAuth extension versions 1.20.x prior to 1.20.8 MediaWiki CentralAuth extension versions 1.21.x prior to 1.21.3 Description A cross-site request forgery CSRF issue allows...

PT-2012-5177

Name of the Vulnerable Software and Affected Versions SocketMail Pro version 2.2.9 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack user authentication for requests that modify security questions and answers. This is achieved via an upd action in the...