phpMyFAQ UserSession Method Unauthorized Access

The vulnerability of the userTracking method in the UserSession class of the src/phpMyFAQ/User/UserSession.php file of the phpMyFAQ web application is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorize...

CVE-2020-11934

It was discovered that snapctl user-open allowed altering the $XDGDATADIRS environment variable when calling the system xdg-open. OpenURL in usersession/userd/launcher.go would alter $XDGDATADIRS to append a path to a directory controlled by the calling snap. A malicious snap could exploit this t...

Concrete CMS: Stored XSS on Add Calendar

Greetings, There is no soup like crayons soup with vegetables. Hello @Concrete5 Team. Like my last report 300532 I found other Stored XSS vulnerability in your nice CMS. If you don't mind I will omit what Stored - XSS is and its description, hope everything is fine in your side about that :. The...

PT-2014-4894

Name of the Vulnerable Software and Affected Versions KnowledgeTree versions 3.7.0.2 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is related to the getFileName function in the KTAPI UserSession class. The get active session function in...

CVE-2005-3917

SQL injection vulnerability in usersession in CommodityRentals 2.0 Online Rental Business Creator script allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2005-3917: Undefined Security Weakness

SQL injection vulnerability in usersession in CommodityRentals 2.0 Online Rental Business Creator script allows remote attackers to execute arbitrary SQL commands via the userid parameter...