3 matches found
PT-2014-8789
Name of the Vulnerable Software and Affected Versions ZTE ZXDSL 831CII affected versions not specified Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of administrators for requests,...
CVE-2014-9019: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in ZTE ZXDSL 831CII allow remote attackers to hijack the authentication of administrators for requests that 1 change the admin user name or 2 conduct cross-site scripting XSS attacks via the sysUserName parameter in a save action to...
PT-2012-5922
Name of the Vulnerable Software and Affected Versions Xavi X7968 affected versions not specified Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for requests that change the administrator password. This is achieved via t...