4106 matches found
CVE-2007-3053
Session fixation vulnerability in Calimero.CMS 3.3.1232 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
CVE-2007-3050
Session fixation vulnerability in chameleon cms 3.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
Session fixation
Session fixation vulnerability in chameleon cms 3.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
Session fixation
Session fixation vulnerability in Calimero.CMS 3.3.1232 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
CVE-2007-3053
CVE-2007-3053 affects Calimero.CMS, specifically version 3.3.1232 and earlier. The issue is a session fixation vulnerability that allows remote attackers to hijack web sessions by setting the PHPSESSID parameter. The available sources confirm the affected product/version and the attack vector (se...
CVE-2007-3050
CVE-2007-3050 concerns Chameleon CMS (3.0 and earlier). A session fixation flaw allows remote attackers to hijack web sessions by supplying a PHPSESSID parameter. The issue arises from how session IDs can be set by an external actor, enabling partial confidentiality and integrity impact as per NV...
CVE-2007-3053
Session fixation vulnerability in Calimero.CMS 3.3.1232 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
CVE-2007-3050
Session fixation vulnerability in chameleon cms 3.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
[MajorSecurity Advisory #50]chameleon cms - Session fixation Issue
MajorSecurity Advisory 50chameleon cms - Session fixation Issue Details ======= Product: chameleon cms Affected version: 3.0 and prior Remote-Exploit: yes Vendor-URL: http://www.chameleon-cms.com Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David...
[MajorSecurity Advisory #49]Calimero.CMS - Session fixation Issue
MajorSecurity Advisory 49Calimero.CMS - Session fixation Issue Details ======= Product: Calimero.CMS Affected version: 3.3.1232 and prior Remote-Exploit: yes Vendor-URL: http://www.calimero-cms.de Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David...
Session fixation
Session fixation vulnerability in eggblog 3.1.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
CVE-2007-2978
Session fixation vulnerability in eggblog 3.1.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
CVE-2007-2978
CVE-2007-2978 describes a session fixation vulnerability in eggblog versions 3.1.0 and earlier, where remote attackers can hijack web sessions by manipulating the PHPSESSID parameter. Affected software: eggblog (versions up to 3.1.0 and earlier). Root cause: session identifier can be set by an at...
CVE-2007-2978
Session fixation vulnerability in eggblog 3.1.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
[MajorSecurity Advisory #48]eggblog - Session fixation Issue
MajorSecurity Advisory 48eggblog - Session fixation Issue Details ======= Product: eggblog Affected version: 3.1.0 and prior Remote-Exploit: yes Vendor-URL: http://www.eggblog.net Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz...
ACROS Security: Session Fixation Vulnerability in HP SIM 5.0
=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2007-05-14-1 ------------------------------------------------------------------------- ASPR 2007-05-14-1: Session Fixation Vulnerability in HP SIM 5.0...
CVE-2007-2719
Session fixation vulnerability in HP Systems Insight Manager SIM 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie...
Session fixation
Session fixation vulnerability in HP Systems Insight Manager SIM 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie...
CVE-2007-2719
Session fixation vulnerability in HP Systems Insight Manager SIM 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie...
CVE-2007-2719
CVE-2007-2719 affects HP Systems Insight Manager (SIM) versions 4.2 and 5.0 SP4/SP5. The vulnerability is a session fixation flaw that allows remote attackers to hijack web sessions by setting the JSESSIONID cookie. Documented impact is complete confidentiality, integrity, and availability compro...