Lucene search
+L

3 matches found

Prion
Prion
•added 2006/01/25 11:03 a.m.•19 views

Session fixation

claroinitlocal.inc.php in Claroline 1.7.2 uses guessable session cookies MD5 hash of connection time, which allows remote attackers to hijack sessions and possibly gain administrative privileges...

10CVSS7.6AI score0.0247EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/01/25 12:00 a.m.•3 views

CVE-2006-0411: Undefined Security Weakness

claroinitlocal.inc.php in Claroline 1.7.2 uses guessable session cookies MD5 hash of connection time, which allows remote attackers to hijack sessions and possibly gain administrative privileges...

10CVSS5.8AI score0.0247EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/16 12:00 a.m.•4 views

CVE-2003-1249: Undefined Security Weakness

WebIntelligence 2.7.1 uses guessable user session cookies, which allows remote attackers to hijack sessions...

7.5CVSS5.8AI score0.0259EPSS
SaveExploits0References1
Rows per page
Query Builder