CVE-2008-1500

Cross-site scripting XSS vulnerability in index.php in TinyPortal 0.8.6 and 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-1500

Cross-site scripting XSS vulnerability in index.php in TinyPortal 0.8.6 and 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-1500

CVE-2008-1500 is an XSS vulnerability in TinyPortal, affecting versions 0.8.6 and 1.0.3, where the PHPSESSID parameter in index.php can be abused to inject arbitrary script/HTML. The entry states the issue originates from third‑party information and provides CVSSv2 metrics from NVD: AV:N/AC:M/Au:...

Improper access control

phpRPG 0.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read session ID values in files under tmp/, and then hijack sessions via PHPSESSID cookies...

Unfixed XSS vulnerability at www.diariofuengirola.com

Security researcher Norehem, has submitted on 08/08/2007 a cross-site-scripting XSS vulnerability affecting www.diariofuengirola.com, which at the time of submission ranked 4981203 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/08/2007. It ...

Session fixation

Session fixation vulnerability in Virtual Hosting Control System VHCS 2.4.7.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-3988

Session fixation vulnerability in Virtual Hosting Control System VHCS 2.4.7.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-3988

CVE-2007-3988 affects Virtual Hosting Control System (VHCS) up to version 2.4.7.1. The issue is a session fixation vulnerability where the web GUI accepts PHPSESSID values from GET/POST, enabling a remote attacker to hijack a user session. Impact is partial confidentiality/integrity/availability ...

Session fixation

Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-3978

Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-3978

Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-3978

CVE-2007-3978 describes a session fixation vulnerability in bwired where an attacker can hijack web sessions by supplying a PHPSESSID value. Public records indicate the issue affects bwired’s session handling and can allow credential- or session-based abuse without user interaction. The connected...

[MajorSecurity Advisory #51]Virtual Hosting Control System - Session fixation Issue

MajorSecurity Advisory 51Virtual Hosting Control System - Session fixation Issue Details ======= Product: Virtual Hosting Control System Affected version: 2.4.7.1 and prior Remote-Exploit: yes Vendor-URL: http://www.vhcs.net Vendor-Status: informed Advisory-Status: published Credits ============...

bwired - index.php?newsID SQL Injection

bwired - index.php?newsID SQL Injection / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ Program Title bwired - Remote SQL Injection Note There is also XSS, PHPSESSID session fixation, and cookie manipulation which I...

bwired (index.php newsID) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ bwired index.php newsID Remote SQL Injection Vulnerability ============================================================ / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ ...

CVE-2007-3053

Session fixation vulnerability in Calimero.CMS 3.3.1232 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-3050

Session fixation vulnerability in chameleon cms 3.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

Session fixation

Session fixation vulnerability in chameleon cms 3.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

Session fixation

Session fixation vulnerability in Calimero.CMS 3.3.1232 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-3053

Session fixation vulnerability in Calimero.CMS 3.3.1232 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...