4887 matches found
CVE-2007-3978
CVE-2007-3978 describes a session fixation vulnerability in bwired where an attacker can hijack web sessions by supplying a PHPSESSID value. Public records indicate the issue affects bwired’s session handling and can allow credential- or session-based abuse without user interaction. The connected...
CVE-2007-3988: Improper Authentication
Session fixation vulnerability in Virtual Hosting Control System VHCS 2.4.7.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
CVE-2007-3978: Undefined Security Weakness
Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
bwired (index.php newsID) Remote SQL Injection Vulnerability
No description provided by source. / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ Program Title bwired - Remote SQL Injection Note...
major_rls51.txt
MajorSecurity Advisory 51Virtual Hosting Control System - Session fixation Issue Details ======= Product: Virtual Hosting Control System Affected version: 2.4.7.1 and prior Remote-Exploit: yes Vendor-URL: http://www.vhcs.net Vendor-Status: informed Advisory-Status: published Credits ============...
[MajorSecurity Advisory #51]Virtual Hosting Control System - Session fixation Issue
MajorSecurity Advisory 51Virtual Hosting Control System - Session fixation Issue Details ======= Product: Virtual Hosting Control System Affected version: 2.4.7.1 and prior Remote-Exploit: yes Vendor-URL: http://www.vhcs.net Vendor-Status: informed Advisory-Status: published Credits ============...
bwired - 'index.php?newsID' SQL Injection
/ \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ Program Title bwired - Remote SQL Injection Note There is also XSS, PHPSESSID session fixation, and cookie manipulation which I will not go into.. The admin hash will be...
bwired (index.php newsID) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================ bwired index.php newsID Remote SQL Injection Vulnerability ============================================================ / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ ...
bwired - index.php?newsID SQL Injection
bwired - index.php?newsID SQL Injection / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ Program Title bwired - Remote SQL Injection Note There is also XSS, PHPSESSID session fixation, and cookie manipulation which I...
MSIE7 entrapment again (+ FF tidbit)
Hello again, Microsoft Internet Explorer seems to have a soft spot for browser entrapment vulnerabilities. Just to recap, in these attacks, the user is made believe he had left a webpage and the URL bar or SSL state data reinforce him in this belief - but in reality, is prevented from doing so, a...
Session fixation
Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter...
CVE-2007-3597
Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter...
CVE-2007-3597
CVE-2007-3597 describes a session fixation vulnerability in Zen Cart 1.3.7 and earlier, where an attacker can hijack web sessions by setting the Cookie parameter. The affected software is Zen Cart (versions up to and including 1.3.7); the underlying issue is that session identifiers can be preset...
CVE-2007-3597
Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter...
CVE-2007-3597: Improper Authentication
Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter...
Session fixation in Zen Cart CMS
==================================================================================== Team Intell Security Advisory TISA2007-05 ------------------------------------------------------------------------------------ Zen Cart 1.3.7 - Session fixation Issue in backend Administration interface...
Session fixation
The Session Initiation Protocol SIP User Access Client UAC message parsing module in Avaya one-X Desktop Edition 2.1.0.70 and earlier allows remote attackers to cause a denial of service device crash via a malformed SIP message...
Session fixation
Multiple unspecified vulnerabilities in Astaro Security Gateway ASG before 7.005 allow remote attackers to cause a denial of service via 1 certain email, which stops the SMTP Proxy during scanning; 2 certain HTTP traffic, which stops or slows down the HTTP proxy during HTTP responses containing...
Session fixation
xscreensaver in Sun Solaris 10 before 20070604, when a GNOME session with Assistive Technology support is running, allows attackers with physical access to take control of the session after entering an Alt-Tab sequence...