CVE-2008-6455

Session fixation vulnerability in Edikon phpShop 0.8.1 allows remote attackers to hijack web sessions via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6455

Session fixation vulnerability in Edikon phpShop 0.8.1 allows remote attackers to hijack web sessions via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-0094

The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the 1 "wpad" and 2 "isatap" NetBIOS names, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery WPAD and Intra-Site Automatic Tunnel Addressing Protocol ISATAP...

Pwn2Own hacker: Safari is 'easy pickings'

Charlie Miller right, the security researcher who won last year’s Pwn2Own hacker contest, is predicting that Apple’s Safari browser will be the easiest target this year. In a note posted on the popular Daily Dave mailing list, Miller describes Safari as “easy pickin’s” and forecasts that at least...

CVE-2008-6384

Multiple cross-site request forgery CSRF vulnerabilities in Comment Mail 5.x before 5.x-1.1, a module for Drupal, allow remote attackers to hijack the authentication of administrators...

CVE-2008-6331

Multiple cross-site request forgery CSRF vulnerabilities in Streber before 0.08093 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2008-6331

Multiple cross-site request forgery CSRF vulnerabilities in Streber before 0.08093 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the manageusers handler in admin/index.php in Falt4 CMS aka Falt4 Extreme RC4 allow remote attackers to hijack the authentication of administrators for requests that change passwords via the 1 edit and 2 editnow actions...

CVE-2008-6128

Session fixation vulnerability in moziloCMS 1.10.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

Session fixation

Session fixation vulnerability in moziloWiki 1.0.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2008-6131

This CVE affects moziloWiki 1.0.1 and earlier, where a flaw in session handling allows remote attackers to hijack sessions by supplying a PHPSESSID parameter. The underlying issue is a session fixation vulnerability that can enable user session takeover. No explicit remediation or patch details a...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in TangoCMS before 2.2.0 allow remote attackers to hijack the authentication of administrators...

CVE-2008-6048

CVE-2008-6048 affects TangoCMS prior to 2.2.0 and is a cross-site request forgery (CSRF) vulnerability. The issue allows an attacker to hijack the authentication of administrators by inducing them to perform unintended actions on the site. The primary affected component is TangoCMS’s administrati...

CVE-2009-0408

Cross-site request forgery CSRF vulnerability in osCommerce 2.2 RC 2a allows remote attackers to hijack the authentication of administrators...

CVE-2008-6039

Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

Session fixation

Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

Session fixation

Session fixation vulnerability in shoppingcart.php in xt:Commerce 3.0.4 and earlier allows remote attackers to hijack web sessions by setting the XTCsid parameter...

CVE-2008-6039

Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2008-6045

The CVE-2008-6045 entry concerns a session fixation flaw in xt:Commerce versions 3.0.4 and earlier, specifically in shopping_cart.php where an attacker can set the XTCsid parameter to hijack a user session. Affected component is the shopping_cart.php logic within xt:Commerce 3.0.4 and earlier. Im...

Internet Explorer 7 ClickJack

Application Name : İnternet Explorer 7 Vulnerable Type : Clickjacking Author : UzmiX function updateboxevt mouseX=evt.pageX?evt.pageX:evt.clientX; mouseY=evt.pageY?evt.pageY:evt.clientY; document.getElementById'open'.style.left=mouseX-2; document.getElementById'open'.style.top=mouseY-2;...