CVE-2018-11385

An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11. A session fixation vulnerability within the "Guard" login feature may allow an attacker to impersonate a victim towards the web...

CVE-2018-11571

ClipperCMS 1.3.3 allows Session Fixation...

Session fixation

ClipperCMS 1.3.3 allows Session Fixation...

CVE-2018-11571

ClipperCMS 1.3.3 allows Session Fixation...

CVE-2018-11571

ClipperCMS 1.3.3 allows Session Fixation...

ClipperCMS Session Fixation Vulnerability

ClipperCMS is a content management system CMS. A security vulnerability exists in ClipperCMS version 1.3.3. An attacker can exploit the vulnerability to allow a user to use a pre-existing session ID or hijack a user session...

CVE-2018-11571

CVE-2018-11571 affects ClipperCMS 1.3.3 and is described as a Session Fixation vulnerability. The connected documents confirm the affected product and vulnerability type but do not provide concrete technical details such as vulnerable components, root cause specifics, exploit vectors, affected ve...

Yokogawa STARDOM Controllers (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Yokogawa Equipment: STARDOM Controllers --------- Begin Update A Part 1 of 5 -------- Vulnerabilities: Use of Hard-coded Credentials, Session Fixation, Insufficiently Protected Credentials,...

CVE-2018-1375

IBM Security Guardium Big Data Intelligence SonarG 3.1 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 137776...

Session fixation

IBM Security Guardium Big Data Intelligence SonarG 3.1 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 137776...

CVE-2018-1375

IBM Security Guardium Big Data Intelligence SonarG 3.1 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 137776...

CVE-2018-1375

CVE-2018-1375 affects IBM Security Guardium Big Data Intelligence (SonarG) 3.1. The issue is that a session variable is not renewed after successful authentication, which could enable session fixation/hijacking by forcing a user to use a cookie potentially known to an attacker (IBM X-Force ID: 13...

CVE-2018-1375

IBM Security Guardium Big Data Intelligence SonarG 3.1 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 137776...

CVE-2018-11385: Session Fixation Issue for Guard Authentication

More info at https://symfony.com/cve-2018-11385...

CVE-2018-11385: Session Fixation Issue for Guard Authentication

More info at https://symfony.com/cve-2018-11385...

CVE-2018-11385: Session Fixation Issue for Guard Authentication

More info at https://symfony.com/cve-2018-11385...

CVE-2018-11385: Session Fixation Issue for Guard Authentication

More info at https://symfony.com/cve-2018-11385...

CVE-2018-11385: Session Fixation Issue for Guard Authentication

Affected versions Symfony 2.7.0 to 2.7.47, 2.8.0 to 2.8.40, 3.3.0 to 3.3.16, 3.4.0 to 3.4.10 and 4.0.0 to 4.0.10 versions of the Symfony Security component are affected by this security issue. The issue has been fixed in Symfony 2.7.48, 2.8.41, 3.3.17, 3.4.11, and 4.0.11. Note that no fixes are...

SAP Internet Transaction Server 6200.x - Session Fixation Cross-Site Scripting

SAP Internet Transaction Server 6200.x - Session Fixation Cross-Site Scripting Exploit Title: SAP Internet Transaction Server ITS 6200.X.X - Session Fixation/ Cross-Site Scripting Dork: /scripts/wgate/ Date: 25.05.2018 Exploit Author: J. Carrillo Lencina 0xd0m7 Vendor Homepage: https://www.sap.co...

SAP Internet Transaction Server 6200.x Session Fixation / Cross Site Scripting

Exploit Title: SAP Internet Transaction Server ITS 6200.X.X - Session Fixation/ Cross-Site Scripting Dork: /scripts/wgate/ Date: 25.05.2018 Exploit Author: J. Carrillo Lencina 0xd0m7 Vendor Homepage: https://www.sap.com Version: SAP ITS 6200.X.X Category: Webapps Tested on: All Platforms CVE:...