4859 matches found
CVE-2007-2546
Session fixation vulnerability in Simple Machines Forum SMF 1.1.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
CVE-2007-2555: Improper Authentication
Unspecified vulnerability in Default.aspx in Podium CMS allows remote attackers to have an unknown impact, possibly session fixation, via a META HTTP-EQUIV Set-cookie expression in the id parameter, related to "cookie manipulation." NOTE: this issue might be cross-site scripting XSS...
CVE-2007-2546: Improper Authentication
Session fixation vulnerability in Simple Machines Forum SMF 1.1.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
[MajorSecurity Advisory #47]Simple Machines Forum (SMF) - Session fixation Issue
MajorSecurity Advisory 47Simple Machines Forum SMF - Session fixation Issue Details ======= Product: Simple Machines Forum SMF Affected version: 1.1.2 and prior Remote-Exploit: yes Vendor-URL: http://www.simplemachines.org Vendor-Status: informed Advisory-Status: published Credits ============...
Session fixation
Session fixation vulnerability in Plogger allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
CVE-2007-2277
Session fixation vulnerability in Plogger allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
CVE-2007-2277
CVE-2007-2277 describes a session-fixation vulnerability in Plogger, where remote attackers can hijack web sessions by setting the PHPSESSID parameter. The vulnerability concerns the PHP session handling in Plogger and can result in partial confidentiality, integrity, and availability impacts as ...
CVE-2007-2277
Session fixation vulnerability in Plogger allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
CVE-2007-2277: Improper Authentication
Session fixation vulnerability in Plogger allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
[MajorSecurity Advisory #46]Plogger - Session fixation Issue
MajorSecurity Advisory 46Plogger - Session fixation Issue Details ======= Product: Plogger Remote-Exploit: yes Vendor-URL: http://www.plogger.org Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz http://www.majorsecurity.de Original Advisory:...
CVE-2007-1966
Session fixation vulnerability in eXV2 CMS 2.0.4.3 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID cookie...
Session fixation
Session fixation vulnerability in eXV2 CMS 2.0.4.3 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID cookie...
CVE-2007-1966
Session fixation vulnerability in eXV2 CMS 2.0.4.3 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID cookie...
CVE-2007-1966
Session fixation vulnerability in eXV2 CMS 2.0.4.3 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID cookie...
CVE-2007-1966
The eXV2 CMS version 2.0.4.3 and earlier is affected by a session fixation vulnerability. This flaw allows remote attackers to hijack web sessions by setting the PHPSESSID cookie. The provided documents do not specify the exact root cause or remediation steps, and no exploitation details are avai...
Session fixation
Session fixation vulnerability in onelook courts on-line allows remote attackers to hijack web sessions by setting a PHPSESSID cookie...
CVE-2007-1951
Session fixation vulnerability in onelook obo Shop allows remote attackers to hijack web sessions by setting a PHPSESSID cookie...
CVE-2007-1953
Session fixation vulnerability in onelook courts on-line allows remote attackers to hijack web sessions by setting a PHPSESSID cookie...