Lucene search
MitreCVELIST:CVE-2007-6470HistoryDec 20, 2007 - 12:00 a.m.
CVE-2007-6470
2007-12-2000:00:00
mitre
www.cve.org
2
phprpg access control session hijacking
phpRPG 0.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read session ID values in files under tmp/, and then hijack sessions via PHPSESSID cookies.
Related
exploitdb
exploitdb
phpRPG 0.8 - '/tmp' Directory PHPSESSID Cookie Session Hijacking
2007-12-15 00:00:00
nvd
nvd
CVE-2007-6470
2007-12-20 00:46:00
prion
prion
Improper access control
2007-12-20 00:46:00
cve
cve
CVE-2007-6470
2007-12-20 00:46:00