46 matches found
WebNMS Framework 5.2SP1 Login Bypass
Summary WebNMS is an industry-leading used to build network management applications architecture. By submitting a custom headers parameter can directly obtain the session Cookie, skip login authentication. Vulnerability details Submit the following Get request HTTP header, add a UserName specify ...
Design/Logic Flaw
Jahia xCM before 6.6.2 does not include the HTTPOnly flag in a Set-Cookie header for the JSESSIONID cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie...
PT-2013-5099
Name of the Vulnerable Software and Affected Versions Jahia xCM versions prior to 6.6.2 Description The issue allows remote attackers to obtain potentially sensitive information via script access to the JSESSIONID cookie, as the HTTPOnly flag is not included in the Set-Cookie header...
BEA Weblogic JSESSIONID Cookie Value Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'BEA Weblogic...
CVE-2007-2719
CVE-2007-2719 affects HP Systems Insight Manager (SIM) versions 4.2 and 5.0 SP4/SP5. The vulnerability is a session fixation flaw that allows remote attackers to hijack web sessions by setting the JSESSIONID cookie. Documented impact is complete confidentiality, integrity, and availability compro...
