CVE-2008-6131

This CVE affects moziloWiki 1.0.1 and earlier, where a flaw in session handling allows remote attackers to hijack sessions by supplying a PHPSESSID parameter. The underlying issue is a session fixation vulnerability that can enable user session takeover. No explicit remediation or patch details a...

CVE-2008-6128

Session fixation vulnerability in moziloCMS 1.10.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2008-6128

CVE-2008-6128 is a session-fixation vulnerability in moziloCMS 1.10.2 and earlier that allows an attacker to hijack user sessions by supplying a PHPSESSID value. The connected documents corroborate the same description across NVD and CVE listings, confirming the affected product and the root caus...

FreeBSD Ports: typo3

The remote host is missing an update to the system as announced in the referenced advisory. VID 653606e9-f6ac-11dd-94d9-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 653606e9-f6ac-11dd-94d9-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD Ports: typo3

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : typo3 -- multiple vulnerabilities (653606e9-f6ac-11dd-94d9-0030843d3802)

Secunia reports : Some vulnerabilities have been reported in Typo3, which can be exploited by malicious people to bypass certain security restrictions, conduct cross-site scripting and session fixation attacks, and compromise a vulnerable system. The 'Install tool' system extension uses...

CVE-2008-6045

Session fixation vulnerability in shoppingcart.php in xt:Commerce 3.0.4 and earlier allows remote attackers to hijack web sessions by setting the XTCsid parameter...

Session fixation

Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2008-6039

Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2008-6039

Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

Session fixation

Session fixation vulnerability in shoppingcart.php in xt:Commerce 3.0.4 and earlier allows remote attackers to hijack web sessions by setting the XTCsid parameter...

CVE-2008-6045

Session fixation vulnerability in shoppingcart.php in xt:Commerce 3.0.4 and earlier allows remote attackers to hijack web sessions by setting the XTCsid parameter...

CVE-2008-6039

Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2008-6045

The CVE-2008-6045 entry concerns a session fixation flaw in xt:Commerce versions 3.0.4 and earlier, specifically in shopping_cart.php where an attacker can set the XTCsid parameter to hijack a user session. Affected component is the shopping_cart.php logic within xt:Commerce 3.0.4 and earlier. Im...

CVE-2008-6039

The CVE-2008-6039 entry documents a session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier . An attacker can hijack a user’s web session by manipulating the PHPSESSID parameter, enabling remote session takeover. This is described across multiple sources (NVD, CVE listing) with a MEDIUM ba...

Debian: Security Advisory (DSA-1711-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1711-1] New TYPO3 packages fix remote code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1711-1 [email protected] http://www.debian.org/security/ Nico Golde January 26, 2009 http://www.debian.org/security/faq -...

[HACKATTACK Advisory 25012009]ConPresso CMS 4.07 - Session Fixation, XFS, XSS

HACKATTACK Advisory 25012009ConPresso CMS 4.07 - Session Fixation, XFS, XSS Details Product: ConPresso CMS 4.07 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.conpresso.de/ Vendor-Status: informed Advisory-Status: not yet published Credits Discovered by: David Vieira-Kurz...

Debian DSA-1711-1 : typo3-src - several vulnerabilities

Several remotely exploitable vulnerabilities have been discovered in the TYPO3 web content management framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0255 Chris John Riley discovered that the TYPO3-wide used encryption key is generated wi...

[SECURITY] [DSA 1711-1] New TYPO3 packages fix remote code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1711-1 [email protected] http://www.debian.org/security/ Nico Golde January 26, 2009 http://www.debian.org/security/faq -...