FreeBSD Ports: rubygem-rails

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: kdelibs

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

LacoodaST from SpaceTag, Inc. session fixation vulnerability

Overview LacoodaST from SpaceTag, Inc. contains a session fixation vulnerability. LacoodaST from SpaceTag, Inc. is groupware providing schedule and task managements, etc. LacoodaST contains a session fixation vulnerability. Hirotaka Katagiri reported this vulnerability to IPA. JPCERT/CC coordinat...

CVE-2008-3738

Session fixation vulnerability in SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to hijack web sessions via unspecified vectors...

Session fixation

Session fixation vulnerability in SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2008-3738

Session fixation vulnerability in SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2008-3738

The CVE-2008-3738 case describes a session fixation vulnerability in SpaceTag LacoodaST 2.1.3 and earlier. Public documents confirm the affected product is LacoodaST by SpaceTag, Inc., with a vulnerability that could allow a remote attacker to hijack a user session. Impact details in sources indi...

CVE-2008-3738

Session fixation vulnerability in SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to hijack web sessions via unspecified vectors...

PT-2008-5097 · Spacetag · Spacetag Lacoodast

Name of the Vulnerable Software and Affected Versions: SpaceTag LacoodaST versions 2.1.3 and earlier Description: A session fixation issue allows remote attackers to hijack web sessions. The exact vectors used for the attack are not specified. Recommendations: For versions 2.1.3 and earlier, upda...

JVN#31723154 LacoodaST from SpaceTag, Inc. session fixation vulnerability

LacoodaST from SpaceTag, Inc. is groupware providing schedule and task managements, etc. LacoodaST contains a session fixation vulnerability. Impact A remote attacker impersonating a logged in user could manipulate the operation with the user's privilege. As a result, disclosure or alteration of...

Fedora 8 : drupal-5.9-1.fc8 (2008-6916)

Update to 5.9, security fixes: SA-2008-046 - http://drupal.org/node/286417 CVE-2008-3222 - session fixation issue, that was first reported to be fixed via SA-2008-044 in drupal 5.8, but the patch for it was not included in the 5.8 tarball. Remember to log in to your site as the admin user before...

Session fixation

Session fixation vulnerability in phpFreeChat 1.1 allows remote authenticated users to hijack web sessions by setting the sessionid parameter to match the victim's nickid parameter...

CVE-2008-3428

Session fixation vulnerability in phpFreeChat 1.1 allows remote authenticated users to hijack web sessions by setting the sessionid parameter to match the victim's nickid parameter...

CVE-2008-3428

Session fixation vulnerability in phpFreeChat 1.1 allows remote authenticated users to hijack web sessions by setting the sessionid parameter to match the victim's nickid parameter...

CVE-2008-3428

The CVE-2008-3428 entry concerns phpFreeChat 1.1, where a vulnerability in session handling allows a remote authenticated user to hijack another user’s session by setting the session_id parameter to match the victim’s nickid. This is a session fixation flaw with potential for partial confidential...

SA-2008-046 - Drupal core - Session fixation

When contributed modules such as Workflow NG terminate the current request during a login event, user module is not able to regenerate the user's session. This may lead to a session fixation attack, when a malicious user is able to control another users' initial session ID. As the session is not...

Session fixation

Session fixation vulnerability in Drupal 5.x before 5.9 and 6.x before 6.3, when contributed modules "terminate the current request during a login event," allows remote attackers to hijack web sessions via unknown vectors...

CVE-2008-3222

Session fixation vulnerability in Drupal 5.x before 5.9 and 6.x before 6.3, when contributed modules "terminate the current request during a login event," allows remote attackers to hijack web sessions via unknown vectors...

CVE-2008-3222

Session fixation vulnerability in Drupal 5.x before 5.9 and 6.x before 6.3, when contributed modules "terminate the current request during a login event," allows remote attackers to hijack web sessions via unknown vectors...

CVE-2008-3222

Session fixation vulnerability in Drupal 5.x before 5.9 and 6.x before 6.3, when contributed modules "terminate the current request during a login event," allows remote attackers to hijack web sessions via unknown vectors...