Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Responsive Coming Soon Page
HIGH 8.8
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. CSRF exists via wp-admin/admin.php.
Read And Understood
HIGH 8.8
An issue was discovered in the read-and-understood plugin 2.1 for WordPress. CSRF exists via wp-admin/options-general.php.
Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SI…
The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorize…
Srbtranslatin
HIGH 8.8
The SrbTransLatin plugin 1.46 for WordPress has CSRF via an srbtranslatoptions action to wp-admin/options-general.php.
Wpglobus
HIGH 8.8
The WPGlobus plugin 1.9.6 for WordPress has CSRF via wp-admin/options.php.
Multiple cross-site request forgery (CSRF) vulnerabilities in Family Connections CMS (aka FCMS) 2.9 and earlier allow remote attackers to hijack the …
ASP.NET Core 1.0. 1.1, and 2.0 allow a cross site request forgery vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Cross Si…
Magento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have CSRF resulting in deletion of a customer address from an a…
Imageinject
HIGH 8.8
The ImageInject plugin 1.15 for WordPress has CSRF via wp-admin/options-general.php.
IBM Tivoli Key Lifecycle Manager 2.6 and 2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unaut…
Online Ticket Booking has CSRF via admin/movieedit.php.
Pfsense
HIGH 8.8
pfSense versions 2.4.1 and lower are vulnerable to clickjacking attacks in the CSRF error page resulting in privileged execution of arbitrary code, b…
phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible t…
Vanilla Forums below 2.1.5 are affected by CSRF leading to Deleting topics and comments from forums Admin access
PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadmin_edit.php.
Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action.
Jboss Fuse
HIGH 8.8
Cross-site request forgery (CSRF) vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arbitrary us…
PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.
Vanguard Marketplace Digital Products PHP has CSRF via /search.
PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.
FS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel.
PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php.
PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general.
PHP Scripts Mall Professional Service Script has CSRF via admin/general_settingupd.php, as demonstrated by modifying a setting in the user panel.
Readymade Video Sharing Script has CSRF via user-profile-edit.php.
Readymade Job Site Script has CSRF via the /job URI.
Bus Booking Script has CSRF via admin/new_master.php.
Piwigo 2.9.2 is vulnerable to Cross-Site Request Forgery via /admin.php?page=configuration§ion=main or /admin.php?page=batch_manager&mode=unit. A…
Versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware lack CSRF controls that can mitigate the effects of CSRF attacks, which are most typ…