CWE-352 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-352/ Sun, 26 Feb 2023 09:11:56 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-352 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-352/ 32 32 CVE-2008-7241 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7241/ Sun, 26 Feb 2023 09:11:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7241/ Cross-site request forgery (CSRF) vulnerability in PunBB before 1.2.17 allows remote attackers to hijack the authentication of unspecified users for requests related to a logout, probably a forced logout.

The post CVE-2008-7241 appeared first on CVE Vulnerability.

]]> Cross-site request forgery (CSRF) vulnerability in PunBB before 1.2.17 allows remote attackers to hijack the authentication of unspecified users for requests related to a logout, probably a forced logout.

The post CVE-2008-7241 appeared first on CVE Vulnerability.

]]> CVE-2008-7243 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7243/ Sun, 26 Feb 2023 09:11:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7243/ Cross-site request forgery (CSRF) vulnerability in page 34 in MODx CMS 0.9.6.1 and 0.9.6.1p1 allows remote attackers to hijack the authentication of other users for requests that modify passwords via manager/index.php. NOTE: due to the lack of details, it is not clear whether this is related to CVE-2008-5941.

The post CVE-2008-7243 appeared first on CVE Vulnerability.

]]> Cross-site request forgery (CSRF) vulnerability in page 34 in MODx CMS 0.9.6.1 and 0.9.6.1p1 allows remote attackers to hijack the authentication of other users for requests that modify passwords via manager/index.php. NOTE: due to the lack of details, it is not clear whether this is related to CVE-2008-5941.

The post CVE-2008-7243 appeared first on CVE Vulnerability.

]]> CVE-2008-7204 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7204/ Sun, 26 Feb 2023 09:11:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7204/ Cross-site request forgery (CSRF) vulnerability in VirtueMart 1.0.13a and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

The post CVE-2008-7204 appeared first on CVE Vulnerability.

]]> Cross-site request forgery (CSRF) vulnerability in VirtueMart 1.0.13a and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

The post CVE-2008-7204 appeared first on CVE Vulnerability.

]]> CVE-2008-7214 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7214/ Sun, 26 Feb 2023 09:11:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7214/ Cross-site request forgery (CSRF) vulnerability in administrator/index2.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to hijack the authentication of administrators for requests that add new administrator accounts via the save task in a com_users action, as demonstrated using a separate XSS vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php.

The post CVE-2008-7214 appeared first on CVE Vulnerability.

]]> Cross-site request forgery (CSRF) vulnerability in administrator/index2.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to hijack the authentication of administrators for requests that add new administrator accounts via the save task in a com_users action, as demonstrated using a separate XSS vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php.

The post CVE-2008-7214 appeared first on CVE Vulnerability.

]]> CVE-2008-7221 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7221/ Sun, 26 Feb 2023 09:11:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7221/ Cross-site request forgery (CSRF) vulnerability in RunCMS 1.6.1 allows remote attackers to hijack the authentication of administrators for requests that (1) add new administrators or (2) modify user profiles via a crafted request to system/admin.php.

The post CVE-2008-7221 appeared first on CVE Vulnerability.

]]> Cross-site request forgery (CSRF) vulnerability in RunCMS 1.6.1 allows remote attackers to hijack the authentication of administrators for requests that (1) add new administrators or (2) modify user profiles via a crafted request to system/admin.php.

The post CVE-2008-7221 appeared first on CVE Vulnerability.

]]> CVE-2008-7192 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7192/ Sun, 26 Feb 2023 09:11:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7192/ Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board (wBB) 3.0.1, and possibly other 3.x versions, allows remote attackers to hijack the authentication of users for requests that delete private messages via the pmID parameter in a delete action in a PM page, a different vulnerability than CVE-2008-0472.

The post CVE-2008-7192 appeared first on CVE Vulnerability.

]]> Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board (wBB) 3.0.1, and possibly other 3.x versions, allows remote attackers to hijack the authentication of users for requests that delete private messages via the pmID parameter in a delete action in a PM page, a different vulnerability than CVE-2008-0472.

The post CVE-2008-7192 appeared first on CVE Vulnerability.

]]> CVE-2008-7193 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7193/ Sun, 26 Feb 2023 09:11:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7193/ PHPKIT 1.6.4 PL1 includes the session ID in the URL, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks by reading the PHPKITSID parameter from the HTTP Referer and using it in a request to (1) modify the user profile via upload_files/include.php or (2) create a new administrator via upload_files/pk/include.php.

The post CVE-2008-7193 appeared first on CVE Vulnerability.

]]> PHPKIT 1.6.4 PL1 includes the session ID in the URL, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks by reading the PHPKITSID parameter from the HTTP Referer and using it in a request to (1) modify the user profile via upload_files/include.php or (2) create a new administrator via upload_files/pk/include.php.

The post CVE-2008-7193 appeared first on CVE Vulnerability.

]]> CVE-2008-7151 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7151/ Sun, 26 Feb 2023 09:11:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7151/ Cross-site request forgery (CSRF) vulnerability in Live 5.x before 5.x-0.1, a module for Drupal, allows remote attackers to hijack the authentication of unspecified privileged users for requests that can be leveraged to execute arbitrary PHP code.

The post CVE-2008-7151 appeared first on CVE Vulnerability.

]]> Cross-site request forgery (CSRF) vulnerability in Live 5.x before 5.x-0.1, a module for Drupal, allows remote attackers to hijack the authentication of unspecified privileged users for requests that can be leveraged to execute arbitrary PHP code.

The post CVE-2008-7151 appeared first on CVE Vulnerability.

]]> CVE-2008-7165 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7165/ Sun, 26 Feb 2023 09:11:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7165/ Cross-site request forgery in cp06_wifi_m_nocifr.cgi in the administrator panel in TELECOM ITALIA Alice Gate2 Plus Wi-Fi allows remote attackers to hijack the authentication of administrators for requests that disable Wi-Fi encryption via certain values for the wlChannel and wlRadioEnable parameters.

The post CVE-2008-7165 appeared first on CVE Vulnerability.

]]> Cross-site request forgery in cp06_wifi_m_nocifr.cgi in the administrator panel in TELECOM ITALIA Alice Gate2 Plus Wi-Fi allows remote attackers to hijack the authentication of administrators for requests that disable Wi-Fi encryption via certain values for the wlChannel and wlRadioEnable parameters.

The post CVE-2008-7165 appeared first on CVE Vulnerability.

]]> CVE-2008-7139 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7139/ Sun, 26 Feb 2023 09:11:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7139/ Multiple cross-site request forgery (CSRF) vulnerabilities in WS-Proxy in Eye-Fi 1.1.2 allow remote attackers to hijack the authentication of users for requests that modify configuration via a SOAPAction parameter of (1) urn:SetOptions for autostart, (2) urn:SetDesktopSync for file upload, or (3) urn:SetFolderConfig for file download location or modification of authentication credentials; and (4) urn:AddNetwork for […]

The post CVE-2008-7139 appeared first on CVE Vulnerability.

]]> Multiple cross-site request forgery (CSRF) vulnerabilities in WS-Proxy in Eye-Fi 1.1.2 allow remote attackers to hijack the authentication of users for requests that modify configuration via a SOAPAction parameter of (1) urn:SetOptions for autostart, (2) urn:SetDesktopSync for file upload, or (3) urn:SetFolderConfig for file download location or modification of authentication credentials; and (4) urn:AddNetwork for adding an arbitrary Service Set Identifier (SSID) to hijack the image upload.

The post CVE-2008-7139 appeared first on CVE Vulnerability.

]]>