Cross-Site Request Forgery (CSRF) — CVEs by weakness type

Photo Gallery Cms Free MEDIUM 6.8

CVE-2015-2983

Cross-site request forgery (CSRF) vulnerability in admin.php in PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone 1.0.1 Free and earlie…

Mitigation only

Fix from $1,600 2015-08-22

Documentum Administrator MEDIUM 6.8

CVE-2015-4530

Cross-site request forgery (CSRF) vulnerability in EMC Documentum WebTop before 6.8P01, Documentum Administrator through 7.2, Documentum Digital Asse…

Fix: after 7.2

Fix from $1,600 2015-08-20

Rsa Archer Egrc MEDIUM 6.8

CVE-2015-0542

Multiple cross-site request forgery (CSRF) vulnerabilities in EMC RSA Archer GRC 5.5 SP1 before P3 allow remote attackers to hijack the authenticatio…

Mitigation only

Fix from $1,600 2015-08-20

Portfolio MEDIUM 6.8

CVE-2015-6523

Cross-site request forgery (CSRF) vulnerability in the Portfolio plugin before 1.05 for WordPress allows remote attackers to hijack the authenticatio…

Fix: after 1.0

Fix from $1,600 2015-08-19

Phpliteadmin MEDIUM 6.8

CVE-2015-6517

Cross-site request forgery (CSRF) vulnerability in phpLiteAdmin 1.1 allows remote attackers to hijack the authentication of users for requests that d…

No fix yet

Fix from $1,600 2015-08-18

The Extensible Catalog Drupal Toolkit MEDIUM 5.1

CVE-2015-5508

Cross-site request forgery (CSRF) vulnerability in the XC NCIP Provider module in the eXtensible Catalog (XC) Drupal Toolkit allows remote attackers …

Mitigation only

Fix from $1,600 2015-08-18

Tuxedo Touch MEDIUM 6.8

CVE-2015-2848

Cross-site request forgery (CSRF) vulnerability in Honeywell Tuxedo Touch before 5.2.19.0_VA allows remote attackers to hijack the authentication of …

Fix: after 5.1.13.0_va

Fix from $1,600 2015-07-26

Webex Meetings Server MEDIUM 6.8

CVE-2015-4281

Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server 2.5 MR1 allows remote attackers to hijack the authentication of arbitr…

Mitigation only

Fix from $1,600 2015-07-22

System Management Homepage MEDIUM 6.0

CVE-2015-2134

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.5.0 allows remote authenticated users to hijack the a…

Fix: after 7.4.0

Fix from $1,600 2015-07-21

C2box MEDIUM 6.8

CVE-2015-4460

Cross-site request forgery (CSRF) vulnerability in SecuritySetting/UserSecurity/UserManagement.aspx in B.A.S C2Box before 4.0.0 (r19171) allows remot…

Fix: after 4.0.0

Fix from $1,600 2015-07-16

Unified Intelligence Center MEDIUM 6.8

CVE-2015-4274

Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified Intelligence Center 10.0(1) and 10.6(1) allows remote attackers…

Mitigation only

Fix from $1,600 2015-07-16

Articlefr MEDIUM 6.8

CVE-2015-5530

Multiple cross-site request forgery (CSRF) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to hijack the authentication o…

No fix yet

Fix from $1,600 2015-07-16

Identity Services Engine Software MEDIUM 6.8

CVE-2015-4267

Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2(0.793), 1.3(0.876), 1.4(0.109), 2.0(…

Mitigation only

Fix from $1,600 2015-07-15

Joomla\! MEDIUM 6.8

CVE-2015-5397

Cross-site request forgery (CSRF) vulnerability in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3.4.2 allows remote attackers to hijack the authentic…

Mitigation only

Fix from $1,600 2015-07-14

Telepresence Advanced Media Gateway MEDIUM 6.8

CVE-2015-4254

Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence Advanced Media Gateway devices with software 1.1(1.40) allows remote attackers …

Mitigation only