CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,392 vulnerabilities with CWE-352
CVE-2009-3520 HIGH
CMSphp 0.21 - Cross-Site Request Forgery via Admin Password Change
CVSS 8.8
CVE-2009-3248
Vtiger Crm - Cross-Site Request Forgery
CVE-2009-3022 MEDIUM
bingo!CMS <= 1.2 - Cross-Site Request Forgery
CVSS 6.5
CVE-2009-2964
SquirrelMail < 1.4.19 - Cross-Site Request Forgery via Multiple Endpoints
CVE-2009-2677
HP Insight Control Suite For Linux <2.11 - CSRF
CVE-2009-2572
Fivestar module for Drupal 5.x-1.x-6.x-1.x - Cross-Site Request Forgery
CVE-2009-2323
Axesstel MV 410R - Cross-Site Request Forgery via Wireless CGI Script
CVE-2009-2150
Campus Virtual-LMS - Cross-Site Request Forgery via Session Termination and Enrolment Actions
CVE-2009-2129
elvinbts 1.2.0 - Cross-Site Request Forgery via Logout Action
CVE-2009-2073
Cisco WRT160N - Cross-Site Request Forgery
CVE-2009-2005
Dokeos 1.8.5 - Cross-Site Request Forgery
CVE-2009-1802
FreePBX 2.4.x-2.5.x and 2.6.x - Cross-Site Request Forgery
CVE-2009-1757
Transmission 1.5-1.53 and 1.6-1.61 - Cross-Site Request Forgery
CVE-2009-1733
IPplan 4.91a - Cross-Site Request Forgery
CVE-2009-1464
Application Access Server 2.0.48 - Cross-Site Request Forgery via Command Job
CVE-2009-1561
Cisco WRT54GC - Cross-Site Request Forgery via administration.cgi
CVE-2009-1518
Beltane < 2.3.11 - Cross-Site Request Forgery
CVE-2009-1434
Foswiki < 1.0.5 - Cross-Site Request Forgery
CVE-2009-1339
TWiki < 4.3.1 - Authenticated Cross-Site Request Forgery via IMG SRC Attribute
CVE-2009-1459
razorCMS < 0.4 - Cross-Site Request Forgery
CVE-2009-1455
WebCollab < 2.50 - Cross-Site Request Forgery
CVE-2009-0039
Apache Geronimo Application Server 2.1-2.1.3 - CSRF
CVE-2009-1290
IBM Advanced Management Module - Cross-Site Request Forgery via Private Blade Power Action Script
CVE-2009-1280
Joomla 1.5.x-1.5.9 - Cross-Site Request Forgery in com_media Component
CVE-2009-1213
Bugzilla 3.2-3.2.2 and 3.3-3.3.3 - Cross-Site Request Forgery via Attachment Editing
Details
Vulnerabilities 9,392
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits