CVE-2007-4188

Session fixation vulnerability in Joomla! before 1.0.13 aka Sunglow allows remote attackers to hijack administrative web sessions via unspecified vectors...

CVE-2007-4188

CVE-2007-4188 describes a session fixation vulnerability in Joomla! versions prior to 1.0.13 (Sunglow). The issue allows an attacker to hijack an administrator web session via unspecified vectors by manipulating session handling. Affected product: Joomla! CMS (pre-1.0.13). Reported impact is remo...

CVE-2007-4203

CVE-2007-4203 describes a session-fixation vulnerability in Mambo 4.6.2 CMS. The issue allows remote attackers to hijack Web sessions by manipulating the Cookie parameter. The provided documents identify the affected product/version and the basic attack concept but do not specify root cause code ...

CVE-2007-4203

Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie parameter...

FreeBSD : joomla -- multiple vulnerabilities (4872d9a7-4128-11dc-bdb0-0016179b2dd5)

A Secunia Advisory reports : joomla can be exploited to conduct session fixation attacks, cross-site scripting attacks or HTTP response splitting attacks. Certain unspecified input passed in comsearch, comcontent and modlogin is not properly sanitised before being returned to a user. This can be...

Mambo 4.6.2 CMS - Session fixation Issue in backend Administration interface

==================================================================================== Team Intell Security Advisory TISA2007-04 ------------------------------------------------------------------------------------ Mambo 4.6.2 CMS - Session fixation Issue in backend Administration interface...

Joomla! com_content Component 'order' Parameter XSS

The version of Joomla! running on the remote host is affected by a cross-site scripting XSS vulnerability in comcontent/content.php due to improper sanitization of user-supplied input to the 'order' parameter before using it to generate dynamic HTML content. An unauthenticated, remote attacker ca...

joomla -- multiple vulnerabilities

A Secunia Advisory reports: joomla can be exploited to conduct session fixation attacks, cross-site scripting attacks or HTTP response splitting attacks. Certain unspecified input passed in comsearch, comcontent and modlogin is not properly sanitised before being returned to a user. This can be...

CVE-2007-3988

Session fixation vulnerability in Virtual Hosting Control System VHCS 2.4.7.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

Session fixation

Session fixation vulnerability in Virtual Hosting Control System VHCS 2.4.7.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-3988

Session fixation vulnerability in Virtual Hosting Control System VHCS 2.4.7.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-3988

CVE-2007-3988 affects Virtual Hosting Control System (VHCS) up to version 2.4.7.1. The issue is a session fixation vulnerability where the web GUI accepts PHPSESSID values from GET/POST, enabling a remote attacker to hijack a user session. Impact is partial confidentiality/integrity/availability ...

CVE-2007-3978

Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

Session fixation

Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-3978

Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-3978

CVE-2007-3978 describes a session fixation vulnerability in bwired where an attacker can hijack web sessions by supplying a PHPSESSID value. Public records indicate the issue affects bwired’s session handling and can allow credential- or session-based abuse without user interaction. The connected...

bwired (index.php newsID) Remote SQL Injection Vulnerability

No description provided by source. / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ Program Title bwired - Remote SQL Injection Note...

major_rls51.txt

MajorSecurity Advisory 51Virtual Hosting Control System - Session fixation Issue Details ======= Product: Virtual Hosting Control System Affected version: 2.4.7.1 and prior Remote-Exploit: yes Vendor-URL: http://www.vhcs.net Vendor-Status: informed Advisory-Status: published Credits ============...

[MajorSecurity Advisory #51]Virtual Hosting Control System - Session fixation Issue

MajorSecurity Advisory 51Virtual Hosting Control System - Session fixation Issue Details ======= Product: Virtual Hosting Control System Affected version: 2.4.7.1 and prior Remote-Exploit: yes Vendor-URL: http://www.vhcs.net Vendor-Status: informed Advisory-Status: published Credits ============...

bwired (index.php newsID) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ bwired index.php newsID Remote SQL Injection Vulnerability ============================================================ / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ ...