Cross site request forgery (csrf)

Invision Power Board 2.1.4 allows remote attackers to hijack sessions and possibly gain administrative privileges by obtaining the session ID from the s parameter, then replaying it in another request...

Gallery < 2.0.3 IP Spoofing

The version of Gallery hosted on the remote web server allows an attacker to spoof the IP address with a bogus 'XFORWARDEDFOR' HTTP header. In addition, an authenticated attacker can reportedly leverage this flaw to launch cross-site scripting attacks by adding comments to a photo. The applicatio...

NeoMail Session ID Weakness neomail-prefs.pl Arbitrary Mail-folder Manipulation

The remote host is running NeoMail, an open source webmail application written in Perl. The installed version of this software fails to validate the 'sessionid' parameter in the 'neomail-prefs.pl' script as a valid session identifier. An unauthenticated attacker may be able to exploit this issue ...

CVE-2006-0711

The 1 addfolder and 2 deletefolder functions in neomail-prefs.pl in NeoMail 1.28 do not validate the Session ID, which allows remote attackers to add and delete arbitrary files, when configured with homedirfolders and homedirspools disabled...

Design/Logic Flaw

The 1 addfolder and 2 deletefolder functions in neomail-prefs.pl in NeoMail 1.28 do not validate the Session ID, which allows remote attackers to add and delete arbitrary files, when configured with homedirfolders and homedirspools disabled...

CVE-2006-0711

The 1 addfolder and 2 deletefolder functions in neomail-prefs.pl in NeoMail 1.28 do not validate the Session ID, which allows remote attackers to add and delete arbitrary files, when configured with homedirfolders and homedirspools disabled...

geronimo_css.txt

Apache Geronimo 1.0 - CSS and persistent HTML-Injection vulnerabilities ======================================================================== Product: ======== Apache Geronimo is the J2EE server project of the Apache Software Foundation. Version: ======== Apache Geronimo 1.0, Jetty 5.1.9...

Multiple PHP extensions vulnerabilities

mysqli extension format string vulnerability, session extension session id HTTP response splitting...

osCommerce Malformed Session ID XSS Vulnerability

osCommerce is an online shop e-commerce solution under on going development by the open source community. Its feature packed out-of-the-box installation allows store owners to setup, run, and maintain their online stores with minimum effort and with absolutely no costs or license fees involved...

osCommerce Malformed Session ID XSS Vulnerability

osCommerce is vulnerable to an XSS flaw. The flaw can be exploited when a malicious user passes a malformed session ID to URI. SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

OS2A_1003.txt

OS2A Hesk Session ID Validation Vulnerability OS2A ID: OS2A1003 Status 9/13/2005 Issue Discovered 9/14/2005 Reported to the vendor 9/18/2005 Patch Released 9/20/2005 Advisory Released Class: Authentication Bypass Severity: CRITICAL Overview: Hesk is a PHP based help desk software that runs with a...

CVE-2005-3042

miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters line feed or carriage return...

CVE-2005-3005

Helpdesk Software Hesk allows remote attackers to bypass authentication for 1 admin.php and 2 adminmain.php by modifying the PHPSESSID session ID parameter or cookie...

CVE-2005-3005

The CVE-2005-3005 issue affects Helpdesk Software Hesk: an authentication bypass via manipulation of the PHPSESSID value (session ID) in admin.php and admin_main.php. Attackers can bypass login remotely by altering the session ID cookie/parameter to gain access without valid credentials; affected...

CVE-2005-3005

Helpdesk Software Hesk allows remote attackers to bypass authentication for 1 admin.php and 2 adminmain.php by modifying the PHPSESSID session ID parameter or cookie...

JVN#38138980 Hiki cross-site scripting vulnerability

Impact A remote attacker could create a content containing attacking code and take over a session by stealing the session ID of the user who logged into the system. If the user logged into the system as the administrator, the remote attacker could manipulate configurations. Solution Products...

CVE-2001-1534

modusertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time and server process ID, which allows local users to obtain session ID's and bypass authentication when these session ID's are used for authentication...

CVE-2001-1534

CVE-2001-1534 affects Apache with the mod_usertrack module (versions 1.3.11–1.3.20). The vulnerability arises from generating session IDs with predictable information (host IP, system time, server PID), enabling local users to obtain session IDs and bypass authentication when those IDs are used f...

CVE-2001-1535

Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtain session ID's from cookies and gain unauthorized access via a brute force attack...

CVE-2001-1534

modusertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time and server process ID, which allows local users to obtain session ID's and bypass authentication when these session ID's are used for authentication...