4053 matches found
Session fixation
Moodle 1.8.x and 1.9.x before 1.9.8 does not enable the "Regenerate session id during login" setting by default, which makes it easier for remote attackers to conduct session fixation attacks...
CVE-2010-1613
Moodle 1.8.x and 1.9.x before 1.9.8 are affected. The root cause is that the Regenerate session id during login setting is not enabled by default, enabling potential session fixation by remote attackers. Debian/SUSE advisories confirm remediation by upgrading Moodle to fixed packages (e.g., Debia...
CVE-2010-1613
Moodle 1.8.x and 1.9.x before 1.9.8 does not enable the "Regenerate session id during login" setting by default, which makes it easier for remote attackers to conduct session fixation attacks...
Joomla Password Reset Weakness and Session Fixation Vulnerability
No description provided by source. A weakness and a vulnerability have been reported in Joomla, which can be exploited by malicious people to disclose sensitive information and conduct session fixation attacks. 1 The weakness is caused due to password reset tokens being stored in plain text in th...
Moodle Prior to 1.9.8/1.8.12 Multiple Vulnerabilities
Moodle is prone to multiple vulnerabilities, including: - multiple cross-site scripting issues - a security-bypass issue - an information-disclosure issue - multiple SQL-injection issues - an HTML-injection issue - a session-fixation issue Attackers can exploit these issues to bypass certain...
Moodle 1.8.x < 1.8.12, 1.9.x < 1.9.8 Multiple Vulnerabilities
Moodle is prone to multiple vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Session fixation
NWFTPD.nlm before 5.08.06 in the FTP server in Novell NetWare does not properly handle partial matches for container names in the FTPREST.TXT file, which allows remote attackers to bypass intended access restrictions via an FTP session...
OXID eShop Enterprise Edition Cross Site Scripting / Session Fixation
--------------------------------------------- OXID eShop Enterprise Edition - Session Fixation Vulnerability - Stored Cross Site Scripting Vulnerability Date: 30.03.2010 --------------------------------------------- - Description OXID eShop EE is a widespread and popular CMS for online shops. The...
OXID eShop Enterprise: Session Fixation and XSS Vulnerabilities
--------------------------------------------- OXID eShop Enterprise Edition - Session Fixation Vulnerability - Stored Cross Site Scripting Vulnerability Date: 30.03.2010 --------------------------------------------- - Description OXID eShop EE is a widespread and popular CMS for online shops. The...
OXID eShop Enterprise: Session Fixation and XSS Vulnerabilities
No description provided by source. bugtraq logo Bugtraq mailing list archives By Date By Thread OXID eShop Enterprise: Session Fixation and XSS Vulnerabilities From: michael.mueller integralis com Date: Tue, 30 Mar 2010 00:13:28 -0600 --------------------------------------------- OXID eShop...
Simple Machines Forum 1.1.11 Session Fixation
======================================================================================== | Title : Simple Machines Forum 1.1.11 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.sec-war.com | Web Site : http://www.simplemachines.org/ | Dork : Powered by SMF...
Session Fixation Attack on HTTP Cookies
By manipulating cookies through a vulnerability similar to cross-site scripting, an attacker can set the session cookies. The legitimate user will be logged out of the application and after he logs in again, the cookie will remain unchanged and the attacker will be able to steal the open session...
Andromeda 1.9.2 Cross Site Scripting / Cookie Manipulation
======================================================================================== | Title : Andromeda v1.9.2 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site : | Script : powered by...
Andromeda v1.9.2 Mullti Vulnerability
Exploit for unknown platform in category web applications ===================================== Andromeda v1.9.2 Mullti Vulnerability ===================================== ======================================================================================== | Title : Andromeda v1.9.2 Mullti...
Andromeda 's' Parameter Cross Site Scripting and Session Fixation Vuln
Exploit for unknown platform in category web applications ================================================================================= Andromeda 's' Parameter Cross Site Scripting and Session Fixation Vulnerabilities...
Andromeda 1.9.2 - s Cross-Site Scripting Session Fixation
Andromeda 1.9.2 - s Cross-Site Scripting Session Fixation source: https://www.securityfocus.com/bid/38735/info Andromeda is prone to a cross-site scripting vulnerability and a session-fixation vulnerability. An attacker may leverage these issues to execute arbitrary script code in the browser of ...
Andromeda 1.9.2 - 's' Cross-Site Scripting / Session Fixation
source: https://www.securityfocus.com/bid/38735/info Andromeda is prone to a cross-site scripting vulnerability and a session-fixation vulnerability. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site a...
Session fixation
Session fixation vulnerability in WikyBlog 1.7.3 rc2 allows remote attackers to hijack web sessions by setting the jsessionid parameter to 1 index.php/Comment/Main, 2 index.php/Comment/Main/HomeWiky, or 3 index.php/Edit/Main...
CVE-2010-0756
Session fixation vulnerability in WikyBlog 1.7.3 rc2 allows remote attackers to hijack web sessions by setting the jsessionid parameter to 1 index.php/Comment/Main, 2 index.php/Comment/Main/HomeWiky, or 3 index.php/Edit/Main...
CVE-2010-0756
Session fixation vulnerability in WikyBlog 1.7.3 rc2 allows remote attackers to hijack web sessions by setting the jsessionid parameter to 1 index.php/Comment/Main, 2 index.php/Comment/Main/HomeWiky, or 3 index.php/Edit/Main...