Vulnerability Category — CSRF

Chinese name:
跨站请求伪造
CVE ID：
352
Detail：
跨站请求伪造（Cross-site request forgery），也被称为one-click attack或者session riding，通常缩写为CSRF或者XSRF， 是一种挟制用户在当前已登录的Web应用程序上执行非本意的操作的攻击方法。

Related Vulnerabilities

SSV ID Name
SSV-12616 Harris Stratex StarMAX subscriber station running config CSRF exploit
SSV-11837 sablog1.6的CSRF漏洞POC
SSV-11048 Limbo CMS 1.0.4.2 CSRF Privilege Escalation PoC
SSV-10518 Siemens ADSL SL2-141 CSRF Exploit
SSV-10530 Zoom VoIP Phone Adapater ATA1+1 1.2.5 XSRF Exploit
SSV-4633 PHPWIND & DISCUZ! CSRF漏洞
SSV-10369 EggBlog 3.1.10 Change Admin Pass CSRF Vulnerability
SSV-10311 PHPmotion <= 2.1 CSRF Vulnerability
SSV-17634 BabbleBoard 1.1.6 (username) CSRF/Cookie Grabber Exploit
SSV-10198 DD-WRT v24-sp1 (XSRF) Cross Site Reference Forgery Exploit
SSV-10062 CUPS 1.3.7 CSRF (add rss subscription) Remote Crash Exploit
SSV-4390 Discuz! flash csrf vul
SSV-9556 Sagem Routers F@ST Remote CSRF Exploit (dhcp hostname attack)
SSV-9529 Cisco Router HTTP Administration CSRF Command Execution Exploit 2
SSV-9528 Cisco Router HTTP Administration CSRF Command Execution Exploit
SSV-1058 phpMyAdmin多个CSRF漏洞
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. 简体中文