Lucene search

[email protected]CVE-2011-4718

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-4718

2022-10-0316:15:13

CWE-264

[email protected]

web.nvd.nist.gov

132

cve-2011-4718

session fixation

php

vulnerability

web sessions

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.006

Percentile

78.7%

JSON

Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sessions by specifying a session ID.

Affected configurations

NVD

Node

phpphpRange≤5.5.1

phpphpMatch5.0.0

phpphpMatch5.0.0beta1

phpphpMatch5.0.0beta2

phpphpMatch5.0.0beta3

phpphpMatch5.0.0beta4

phpphpMatch5.0.0rc1

phpphpMatch5.0.0rc2

phpphpMatch5.0.0rc3

phpphpMatch5.0.1

phpphpMatch5.0.2

phpphpMatch5.0.3

phpphpMatch5.0.4

phpphpMatch5.0.5

phpphpMatch5.1.0

phpphpMatch5.1.1

phpphpMatch5.1.2

phpphpMatch5.1.3

phpphpMatch5.1.4

phpphpMatch5.1.5

phpphpMatch5.1.6

phpphpMatch5.2.0

phpphpMatch5.2.1

phpphpMatch5.2.2

phpphpMatch5.2.3

phpphpMatch5.2.4

phpphpMatch5.2.5

phpphpMatch5.2.6

phpphpMatch5.2.7

phpphpMatch5.2.8

phpphpMatch5.2.9

phpphpMatch5.2.10

phpphpMatch5.2.11

phpphpMatch5.2.12

phpphpMatch5.2.13

phpphpMatch5.2.14

phpphpMatch5.2.15

phpphpMatch5.2.16

phpphpMatch5.2.17

phpphpMatch5.3.0

phpphpMatch5.3.1

phpphpMatch5.3.2

phpphpMatch5.3.3

phpphpMatch5.3.4

phpphpMatch5.3.5

phpphpMatch5.3.6

phpphpMatch5.3.7

phpphpMatch5.3.8

phpphpMatch5.3.9

phpphpMatch5.3.10

phpphpMatch5.3.11

phpphpMatch5.3.12

phpphpMatch5.3.13

phpphpMatch5.3.14

phpphpMatch5.3.15

phpphpMatch5.3.16

phpphpMatch5.3.17

phpphpMatch5.3.18

phpphpMatch5.3.19

phpphpMatch5.3.20

phpphpMatch5.3.21

phpphpMatch5.3.22

phpphpMatch5.3.23

phpphpMatch5.3.24

phpphpMatch5.3.25

phpphpMatch5.3.26

phpphpMatch5.3.27

phpphpMatch5.4.0

phpphpMatch5.4.1

phpphpMatch5.4.2

phpphpMatch5.4.3

phpphpMatch5.4.4

phpphpMatch5.4.5

phpphpMatch5.4.6

phpphpMatch5.4.7

phpphpMatch5.4.8

phpphpMatch5.4.9

phpphpMatch5.4.10

phpphpMatch5.4.11

phpphpMatch5.4.12

phpphpMatch5.4.12rc1

phpphpMatch5.4.12rc2

phpphpMatch5.4.13

phpphpMatch5.4.13rc1

phpphpMatch5.4.14

phpphpMatch5.4.14rc1

phpphpMatch5.4.15rc1

phpphpMatch5.4.16rc1

phpphpMatch5.5.0alpha1

phpphpMatch5.5.0alpha2

phpphpMatch5.5.0alpha3

phpphpMatch5.5.0alpha4

phpphpMatch5.5.0alpha5

phpphpMatch5.5.0alpha6

phpphpMatch5.5.0beta1

phpphpMatch5.5.0beta2

phpphpMatch5.5.0beta3

phpphpMatch5.5.0beta4

phpphpMatch5.5.0rc1

phpphpMatch5.5.0rc2

VendorProductVersionCPE
phpphp5.0.0cpe:/a:php:php:5.0.0:beta1::
phpphp5.3.22cpe:/a:php:php:5.3.22:::
phpphp5.1.2cpe:/a:php:php:5.1.2:::
phpphp5.3.4cpe:/a:php:php:5.3.4:::
phpphp5.5.0cpe:/a:php:php:5.5.0:alpha3::
phpphp5.3.2cpe:/a:php:php:5.3.2:::
phpphp5.4.11cpe:/a:php:php:5.4.11:::
phpphp5.4.12cpe:/a:php:php:5.4.12:rc2::
phpphp5.3.7cpe:/a:php:php:5.3.7:::
phpphp5.3.6cpe:/a:php:php:5.3.6:::

Vendor	Product	Version	CPE
php	php	5.0.0	cpe:/a:php:php:5.0.0:beta1::
php	php	5.3.22	cpe:/a:php:php:5.3.22:::
php	php	5.1.2	cpe:/a:php:php:5.1.2:::
php	php	5.3.4	cpe:/a:php:php:5.3.4:::
php	php	5.5.0	cpe:/a:php:php:5.5.0:alpha3::
php	php	5.3.2	cpe:/a:php:php:5.3.2:::
php	php	5.4.11	cpe:/a:php:php:5.4.11:::
php	php	5.4.12	cpe:/a:php:php:5.4.12:rc2::
php	php	5.3.7	cpe:/a:php:php:5.3.7:::
php	php	5.3.6	cpe:/a:php:php:5.3.6:::