EUVD-2012-1333

Malware in sbrugna...

PT-2014-8789

Name of the Vulnerable Software and Affected Versions ZTE ZXDSL 831CII affected versions not specified Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of administrators for requests,...

CVE-2014-9019: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in ZTE ZXDSL 831CII allow remote attackers to hijack the authentication of administrators for requests that 1 change the admin user name or 2 conduct cross-site scripting XSS attacks via the sysUserName parameter in a save action to...

CVE-2012-5320

CVE-2012-5320 : CSRF vulnerability in Sagem F@ST 2604 253180972B, in password.cgi, allows remote attackers to hijack administrator authentication and change the password via the sysPassword parameter. Affected component: password.cgi on Sagem F@ST 2604 series. Root cause: CSRF enabling password c...

CVE-2012-5320: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in password.cgi in Sagem F@ST 2604 253180972B allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter...

PT-2012-5919

Name of the Vulnerable Software and Affected Versions Sagem F@ST 2604 version 253180972B Description A cross-site request forgery issue exists, allowing remote attackers to hijack administrator authentication for requests that change the administrator password via the sysPassword parameter...

PT-2012-5922

Name of the Vulnerable Software and Affected Versions Xavi X7968 affected versions not specified Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for requests that change the administrator password. This is achieved via t...

CVE-2012-1308: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in redpass.cgi in D-Link DSL-2640B Firmware EU4.00 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter...

PT-2012-3185

Name of the Vulnerable Software and Affected Versions D-Link DSL-2640B Firmware version EU 4.00 Description A cross-site request forgery issue allows remote attackers to hijack administrator authentication for requests that change the administrator password via the sysPassword parameter...

CVE-2012-4746

Cross-site request forgery CSRF vulnerability in accessaccount.cgi in ZTE ZXDSL 831IIV7.5.0aZ29OV allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter...

CVE-2012-4746

The CVE-2012-4746 issue affects ZTE ZXDSL 831IIV7.5.0a_Z29_OV, specifically a CSRF in accessaccount.cgi that lets remote attackers hijack administrator authentication to change the admin password via the sysPassword parameter. The NVD entry lists a Network attack vector with no authentication and...

CVE-2012-4746: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in accessaccount.cgi in ZTE ZXDSL 831IIV7.5.0aZ29OV allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter...

PT-2012-5572

Name of the Vulnerable Software and Affected Versions ZTE ZXDSL 831IIV7.5.0a Z29 OV Description A cross-site request forgery issue allows remote attackers to hijack administrator authentication for requests that change the administrator password via the sysPassword parameter in the...