漏洞分类 — 跨站请求伪造

英文名字
CSRF
CVE ID：
352
漏洞详情：
跨站请求伪造（Cross-site request forgery），也被称为one-click attack或者session riding，通常缩写为CSRF或者XSRF， 是一种挟制用户在当前已登录的Web应用程序上执行非本意的操作的攻击方法。

相关漏洞

SSV ID 漏洞名称
SSV-62168 Kloxo-MR跨站请求伪造漏洞
SSV-62078 ICOMM 610 Wireless Modem跨站请求伪造漏洞
SSV-62081 MediaWiki 'Special:ChangePassword'跨站请求伪造漏洞
SSV-62050 oVirt跨站请求伪造漏洞
SSV-62042 WordPress GD Star Rating插件跨站请求伪造漏洞
SSV-62038 WordPress Disable Comments插件跨站请求伪造漏洞
SSV-62018 WordPress HTML Sitemap插件'inc/AdminPage.php'跨站请求伪造漏洞
SSV-61960 Check_MK跨站请求伪造漏洞(CVE-2014-2330)
SSV-61963 Cacti跨站请求伪造漏洞
SSV-61953 IBM Lotus Protector for Mail Security跨站请求伪造漏洞
SSV-61943 D-Link DIR-600L跨站请求伪造漏洞
SSV-61909 Ubee EVW3200跨站请求伪造漏洞
SSV-61919 IBM Cognos Express跨站请求伪造漏洞
SSV-61875 WordPress User Domain Whitelist插件跨站请求伪造漏洞
SSV-61879 osCmax跨站请求伪造漏洞
SSV-61846 Savsoft Quiz跨站请求伪造漏洞
SSV-61853 WordPress XCloner插件跨站请求伪造漏洞
SSV-61845 WordPress Subscribe To Comments Reloaded插件跨站请求伪造漏洞
SSV-61793 LuxCal Web Calendar跨站请求伪造漏洞
SSV-61795 WordPress LayerSlider插件跨站请求伪造漏洞
SSV-61738 D-Link DSL-2640U跨站请求伪造漏洞
SSV-61737 D-Link DIR-600跨站请求伪造漏洞
SSV-61728 Huawei E355信息泄漏和跨站请求伪造漏洞
SSV-61719 Serena Dimensions CM跨站请求伪造漏洞
SSV-61729 HostBill Email Templates Configuration Page跨站请求伪造漏洞
SSV-61656 WordPress Google Analytics MU插件跨站请求伪造漏洞
SSV-61638 WordPress MP3-jPlayer插件跨站请求伪造漏洞
SSV-61624 Drupal Content Lock模块跨站请求伪造漏洞
SSV-61601 Piwigo 'ws.php'跨站请求伪造漏洞
SSV-61535 Subrion CMS 3.1.1跨站请求伪造漏洞
SSV-61434 D-Link DSL-2750B ADSL Router跨站请求伪造漏洞
SSV-61388 LinPHA 1.3.4多个漏洞
SSV-61352 Built2Go PHP Shopping跨站请求伪造漏洞
SSV-61336 Auto Classifieds Script 2.0添加管理员CSRF漏洞
SSV-61331 PHPJabbers Property Listing Script 2.0添加管理员CSRF漏洞
SSV-61312 EZGenerator跨站请求伪造漏洞
SSV-61291 Technicolor TC7200多个跨站请求伪造漏洞
SSV-61289 Seagate BlackArmor NAS sg2000-2000.1331跨站请求伪造漏洞
SSV-61283 WordPress Custom Website Data插件跨站请求伪造漏洞
SSV-61238 JForum login.page adminUsers模块iyonghu权限跨站请求伪造漏洞
SSV-61228 Wordpress AskApache Firefox Adsense插件跨站请求伪造漏洞
SSV-61187 Cisco WebEx Training Center跨站请求伪造漏洞
SSV-61163 D-Link DAP-2553跨站脚本和请求伪造漏洞
SSV-61168 Cisco EPC3925跨站请求伪造漏洞
SSV-61145 IBM Cognos Command Center跨站请求伪造漏洞
SSV-61112 Apache Tomcat 5.5.25跨站请求伪造漏洞
SSV-61088 PlaySMS SMS Gateway跨站请求伪造漏
SSV-60950 WordPress Xhanch - My Twitter插件跨站请求伪造漏洞(CVE-2013-3253)
SSV-60842 WordPress Content Slide插件跨站请求伪造漏洞
SSV-62313 flash crossdomain.xml 跨站请求伪造
SSV-60497 Apache Tomcat 跨站请求伪造漏洞
SSV-60414 Drupal Password Policy模块跨站请求伪造和跨站脚本执行漏洞
SSV-62295 PHPCMS V9.17 phpcms/modules/wap/index.php SQL注入漏洞
SSV-60365 MediaWiki 1.x 跨站请求伪造漏洞
SSV-60357 Apache Group Struts 2.x跨站请求伪造和拒绝服务漏洞
SSV-60087 WordPress Anti-CSRF令牌安全绕过漏洞
SSV-30213 Drupal Wishlist Module 6.x / 7.x XSS / CSRF
SSV-30169 Drupal CMS version 7.12 suffers from multiple cross site request forgery vulnerabilities
SSV-30168 Endian UTM Firewall v2.4.x & v2.5.0 多个Web安全漏洞
SSV-30106 Kloxo LxCenter CP v6.1.10 - Multiple Web Vulnerabilities
SSV-30105 Bugzilla jsonrpc.cgi 跨站请求伪造漏洞
SSV-30103 Zen Cart 'path_to_admin/product.php'跨站请求伪造漏洞
SSV-30044 DirectAdmin ADD Sub Domain CSRF Exploit
SSV-26134 Bugzilla XSS / XSRF / Unauthorized Account Creation
SSV-26012 JBoss Application Server跨站请求伪造漏洞
SSV-20916 cPanel < 11.30.2 Multiple CSRF Vulnerabilities
SSV-20765 phpBB AJAX Chat/Shoutbox MOD CSRF Vulnerability
SSV-20709 Joomla 1.6.3 CSRF Exploit
SSV-20625 IBM WebSphere Application Server 7.0.0.13 CSRF Vulnerability
SSV-20158 shopxp html版2.0 CSRF漏洞
SSV-19888 bbPress v1.0.2 Cross-Site Request Forgery
SSV-19864 Allomani Songs & Clips Script v2.7.0 - [CSRF] Add Admin Account
SSV-19837 PHPWCMS Cross-Site Request Forgery Vulnerability
SSV-19818 Planet 1.1 - [CSRF] Add Admin Account
SSV-19740 Sun Solaris 10 ftpd Cross-site request forgery
SSV-19448 Pulse CMS view.php页面跨站请求伪造漏洞
SSV-19382 CMS Made Simple 1.7 CSRF Vulnerability
SSV-19301 Multi CSRF vulnerability in DirectAdmin (1.34.4)
SSV-19165 cPanel Multiple CSRF Vulnerabilities
SSV-18859 Wing FTP Server v3.2.4 CSRF Vulnerability
SSV-88028 phpwind 6.0&6.3&7.0 CSRF漏洞
SSV-88029 Discuz! 6.0.0&6.1.0&7.0.0 CSRF漏洞
SSV-87655 phpMyAdmin 2.9.1 rc1及之前版本存在多个CSRF漏洞
SSV-87639 WebSphere 7.0.0.7 安全组件的控制台CSRF漏洞
SSV-18579 Jobscript4Web 3.5 Multiple CSRF Vulnerability
SSV-18580 Matrimony Script CSRF Vulnerability
SSV-18530 DubSite CMS v1.0 CSRF Vulnerability
SSV-18531 iGaming CMS v1.5 CSRF Vulnerability
SSV-15087 oBlog Persistant XSS, CSRF, Admin Bruteforce
SSV-18522 Ez News Manager / Pro CSRF Change Admin Password
SSV-18517 Traidnt Discovery - [CSRF] Create Staff Account
SSV-18509 AdManagerPro CSRF Create Administrator Account
SSV-18511 Easy Banner Pro - [ CSRF ] Create Administrator Account
SSV-18512 Text Exchange Pro - [ CSRF ] Create Administrator Account
SSV-18499 Redmine <= 0.8.6 CSRF Add Admin User Exploit
SSV-18508 Link Up Gold CSRF - Create Administrator Account
SSV-18489 Acc PHP eMail v1.1 - CSRF
SSV-18491 Frog v0.9.5 CSRF Vulnerability
SSV-18470 Chipmunk Newsletter CSRF Vulnerabilities
SSV-18327 Quick.Cart 3.4 and Quick.CMS 2.4 CSRF Vulnerabilities
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English