Cross-site request forgery (CSRF) vulnerability in Microdasys before 3.5.1-B708 as used in Bloxx Web Filtering before 5.0.14 and other products allows remote attackers to hijack the authentication of arbitrary users for requests that trigger error pages containing XSS sequences a different vulnerability than CVE-2012-2564.