Session fixation

Session fixation vulnerability in Virtual Hosting Control System VHCS 2.4.7.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-3988

CVE-2007-3988 affects Virtual Hosting Control System (VHCS) up to version 2.4.7.1. The issue is a session fixation vulnerability where the web GUI accepts PHPSESSID values from GET/POST, enabling a remote attacker to hijack a user session. Impact is partial confidentiality/integrity/availability ...

Session fixation

Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-3978

Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-3978

Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-3978

CVE-2007-3978 describes a session fixation vulnerability in bwired where an attacker can hijack web sessions by supplying a PHPSESSID value. Public records indicate the issue affects bwired’s session handling and can allow credential- or session-based abuse without user interaction. The connected...

bwired - index.php?newsID SQL Injection

bwired - index.php?newsID SQL Injection / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ Program Title bwired - Remote SQL Injection Note There is also XSS, PHPSESSID session fixation, and cookie manipulation which I...

[MajorSecurity Advisory #51]Virtual Hosting Control System - Session fixation Issue

MajorSecurity Advisory 51Virtual Hosting Control System - Session fixation Issue Details ======= Product: Virtual Hosting Control System Affected version: 2.4.7.1 and prior Remote-Exploit: yes Vendor-URL: http://www.vhcs.net Vendor-Status: informed Advisory-Status: published Credits ============...

bwired (index.php newsID) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ bwired index.php newsID Remote SQL Injection Vulnerability ============================================================ / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ ...

CVE-2007-3050

Session fixation vulnerability in chameleon cms 3.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

Session fixation

Session fixation vulnerability in chameleon cms 3.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-3053

Session fixation vulnerability in Calimero.CMS 3.3.1232 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

Session fixation

Session fixation vulnerability in Calimero.CMS 3.3.1232 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-3050

Session fixation vulnerability in chameleon cms 3.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-3053

Session fixation vulnerability in Calimero.CMS 3.3.1232 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-3050

CVE-2007-3050 concerns Chameleon CMS (3.0 and earlier). A session fixation flaw allows remote attackers to hijack web sessions by supplying a PHPSESSID parameter. The issue arises from how session IDs can be set by an external actor, enabling partial confidentiality and integrity impact as per NV...

[MajorSecurity Advisory #49]Calimero.CMS - Session fixation Issue

MajorSecurity Advisory 49Calimero.CMS - Session fixation Issue Details ======= Product: Calimero.CMS Affected version: 3.3.1232 and prior Remote-Exploit: yes Vendor-URL: http://www.calimero-cms.de Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David...

CVE-2007-2978

Session fixation vulnerability in eggblog 3.1.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

Session fixation

Session fixation vulnerability in eggblog 3.1.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-2978

CVE-2007-2978 describes a session fixation vulnerability in eggblog versions 3.1.0 and earlier, where remote attackers can hijack web sessions by manipulating the PHPSESSID parameter. Affected software: eggblog (versions up to 3.1.0 and earlier). Root cause: session identifier can be set by an at...