CVE-2007-5154

Aipo (Aimluck, Inc.) and Aipo ASP 3.0.1.0 and earlier are affected by a session fixation vulnerability. The issue allows an attacker to impersonate a user by obtaining or forcing a valid session ID, enabling potentially privileged actions once the user logs in. The JVN entry describes risk as use...

CVE-2007-5154

Session fixation vulnerability in Aipo and Aipo ASP 3.0.1.0 and earlier allows remote attackers to hijack web sessions via unspecified vectors...

JVN#70075625 Aipo session fixation vulnerability

Aipo from Aimluck, Inc. is groupware including functions such as scheduler and intra-blogging. Aipo contains a session fixation vulnerability which may allow an attacker to impersonate a user when the user logs into AIPO with the session ID sent by the attacker. Impact This vulnerability may allo...

VHCS PHPSESSID Cookie Session Fixation

The remote host is running VHCS, a control panel for hosting providers. The GUI portion of the version of VHCS installed on the remote host accepts session identifiers from GET and likely POST variables, which makes it susceptible to a session fixation attack. An attacker may be able to exploit...

CVE-2007-4438

Session fixation vulnerability in Ampache before 3.3.3.5 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2007-4438

Session fixation vulnerability in Ampache before 3.3.3.5 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2007-4438

CVE-2007-4438 affects Ampache before 3.3.3.5. The vulnerability is a session-fixation flaw that allows remote attackers to hijack web sessions via unspecified vectors. Affected software is Ampache (web-based audio management) and the issue is documented across several sources including Gentoo GLS...

CVE-2007-4438

Session fixation vulnerability in Ampache before 3.3.3.5 allows remote attackers to hijack web sessions via unspecified vectors...

Session fixation

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes "'" as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to conduct session hijacking attacks...

Session fixation

The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and later chipsets, allows local users with access to an X11 session and Direct Rendering Manager DRM to write to arbitrary memory locations and gain privileges via a crafted batchbuffer...

Joomla 1.0.12 CMS - Session fixation Issue in backend Administration interface

==================================================================================== Team Intell Security Advisory TISA2007-03 ------------------------------------------------------------------------------------ Joomla 1.0.12 CMS - Session fixation Issue in backend Administration interface...

Session fixation

Session fixation vulnerability in Joomla! before 1.0.13 aka Sunglow allows remote attackers to hijack administrative web sessions via unspecified vectors...

CVE-2007-4203

Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie parameter...

Session fixation

Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie parameter...

CVE-2007-4188

Session fixation vulnerability in Joomla! before 1.0.13 aka Sunglow allows remote attackers to hijack administrative web sessions via unspecified vectors...

CVE-2007-4188

Session fixation vulnerability in Joomla! before 1.0.13 aka Sunglow allows remote attackers to hijack administrative web sessions via unspecified vectors...

CVE-2007-4188

CVE-2007-4188 describes a session fixation vulnerability in Joomla! versions prior to 1.0.13 (Sunglow). The issue allows an attacker to hijack an administrator web session via unspecified vectors by manipulating session handling. Affected product: Joomla! CMS (pre-1.0.13). Reported impact is remo...

CVE-2007-4203

CVE-2007-4203 describes a session-fixation vulnerability in Mambo 4.6.2 CMS. The issue allows remote attackers to hijack Web sessions by manipulating the Cookie parameter. The provided documents identify the affected product/version and the basic attack concept but do not specify root cause code ...

CVE-2007-4203

Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie parameter...

FreeBSD : joomla -- multiple vulnerabilities (4872d9a7-4128-11dc-bdb0-0016179b2dd5)

A Secunia Advisory reports : joomla can be exploited to conduct session fixation attacks, cross-site scripting attacks or HTTP response splitting attacks. Certain unspecified input passed in comsearch, comcontent and modlogin is not properly sanitised before being returned to a user. This can be...