CVE-2011-2401

Session fixation vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2011-2401

HP SiteScope versions 9.x–11.x are affected by CVE-2011-2401 (session fixation). The vulnerability could allow remote attackers, with network access and no authentication, to hijack user sessions (CVSSv2 base score 9.0 per HP bulletin), via unspecified vectors. HP’s security bulletin HPSBMU02692 ...

PT-2011-3829

Name of the Vulnerable Software and Affected Versions HP SiteScope versions 9.x through 11.x Description A session fixation issue allows remote attackers to hijack web sessions. The exact vectors used for the attack are not specified. Recommendations For HP SiteScope versions 9.x through 11.x,...

CVE-2011-2401: Undefined Security Weakness

Session fixation vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to hijack web sessions via unspecified vectors...

Cross Site Scripting - Dokumentation, Analyse & Techniken

Document Title: =============== Cross Site Scripting - Dokumentation, Analyse & Techniken References: =========== https://www.vulnerability-lab.com/resources/documents/198.pdf https://de.wikipedia.org/wiki/Cross-SiteScriptingWeblinks ; Release Date: ============= 2011-07-19 Vulnerability Laborato...

Oracle WebLogic Server Session Fixation (CVE-2010-4437)

A Remote attacker can exploit this vulnerability by enticing an unsuspecting user to first open a specially crafted web page and then log in to the target service. A session fixation vulnerability has been reported in Oracle WebLogic Server. This is a session fixation vulnerability. The...

Adobe ColdFusion Multiple Vulnerabilities (APSB11-04) (credentialed check)

The version of Adobe ColdFusion running on the remote Windows host is affected by multiple vulnerabilities : - Multiple cross-site scripting vulnerabilities exist in the ColdFusion administrator console. CVE-2011-0580 - Multiple CRLF injection vulnerabilities in various tags allow adding headers...

CVE-2011-2021

Session fixation vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to hijack web sessions via unspecified vectors...

Session fixation

Session fixation vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2011-2021

CVE-2011-2021 covers a session-fixation vulnerability in TIBCO iProcess components (Engine before 11.1.3 and Workspace before 11.3.1). The issue can allow remote attackers to hijack web sessions via unspecified vectors by manipulating inbound HTTP session handling. Affected components include TIB...

CVE-2011-2021

Session fixation vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2011-2021: Undefined Security Weakness

Session fixation vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to hijack web sessions via unspecified vectors...

PT-2011-3557

Name of the Vulnerable Software and Affected Versions TIBCO iProcess Engine versions prior to 11.1.3 TIBCO iProcess Workspace versions prior to 11.3.1 Description A session fixation issue allows remote attackers to hijack web sessions. Recommendations For TIBCO iProcess Engine versions prior to...

Oracle WebLogic Server Servlet Container Session Fixation

The version of Oracle WebLogic Server running on the remote host has a session fixation vulnerability. A remote attacker could exploit this by tricking a user into making a specially crafted POST request. This would allow the attacker to hijack the user's session. %NASLMINLEVEL 70300 C Tenable...

Oracle WebLogic Session Fixation Via HTTP POST

Exploit for multiple platform in category web applications Name Oracle WebLogic – Session Fixation Via HTTP POST Request Vendor Website http://www.oracle.com/ Date Released 11 March 2011 – CVE-2010-4437 Affected Software Oracle WebLogic Server 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, 10.3.3 Researche...

Oracle WebLogic - POST Session Fixation

Oracle WebLogic - POST Session Fixation Name Oracle WebLogic – Session Fixation Via HTTP POST Request Vendor Website http://www.oracle.com/ Date Released 11 March 2011 – CVE-2010-4437 Affected Software Oracle WebLogic Server 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, 10.3.3 Researcher Roberto Suggi Liveran...

Oracle WebLogic - POST Session Fixation

Name Oracle WebLogic – Session Fixation Via HTTP POST Request Vendor Website http://www.oracle.com/ Date Released 11 March 2011 – CVE-2010-4437 Affected Software Oracle WebLogic Server 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, 10.3.3 Researcher Roberto Suggi Liverani Description Oracle WebLogic servlet...

[DCA-2011-0003]: LMS Web Ensino - Multiple XSS, Session Fixation, CSRF and SQL Injection

DCA-2011-0003 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software - LMS Web Ensino Vendor Product Description - Portuguese - O Learning Management System LMS Web Ensino uma ferramenta completa para o gerenciamento e oferta de cursos e treinamentos...

Session fixation

The Session Initiation Protocol SIP Proxy in the HTTP Transport component in IBM WebSphere Application Server WAS before 7.0.0.15 allows remote attackers to cause a denial of service worker thread exhaustion and UDP messaging outage by sending many UDP messages...

LMS Web Ensino XSRF / XSS / SQL Injection / Session Fixation

DCA-2011-0003 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software - LMS Web Ensino Vendor Product Description - Portuguese - O Learning Management System LMS Web Ensino é uma ferramenta completa para o gerenciamento e oferta de cursos e treinamentos à...