250 matches found
PHPWebGallery 1.7.2 - Session Hijacking Code Execution
PHPWebGallery 1.7.2 - Session Hijacking Code Execution $b'.$sort.';' 64. ; An attacker could be able to inject and execute PHP code through $GET'sort', that is passed to createfunction at line 63 see https://www.securityfocus.com/bid/31398. Only admin can access to the plugins management interfac...
PHPWebGallery 1.7.2 - Session Hijacking / Code Execution
$b'.$sort.';' 64. ; An attacker could be able to inject and execute PHP code through $GET'sort', that is passed to createfunction at line 63 see https://www.securityfocus.com/bid/31398. Only admin can access to the plugins management interface, but the attacker might be able to retrieve a valid...
Debian OpenSSH/OpenSSL Package Random Number Generator Weakness (SSL check)
The remote x509 certificate on the remote SSL server has been generated on a Debian or Ubuntu system which contains a bug in the random number generator of its OpenSSL library. The problem is due to a Debian packager removing nearly all sources of entropy in the remote version of OpenSSL. An...
CVE-2007-3978: Undefined Security Weakness
Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
Moodle <= 1.5.2 (moodledata) Remote Session Disclosure Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Moodle 2KB SESSION|O:6:"object":12:s:12:"sessiontest...
Moodle 1.5.2 - 'moodledata' Remote Session Disclosure
--/ INTRODUCTION -- / Advisory : MOODLE 2KB SESSION|O:6:"object":12:s:12:"sessiontest";s:10:"zN0PiMhwWK";s:8:"encoding"; s:10:"iso-8859-1";s:7:"fromurl";s:69:"http://www.TARGET.com/moodle/mod/forum/ view.php?id=100";s:10:"logincount";i:1;s:18:"calcoursereferer";i:0;s:15:"cal...
Moodle 1.5.2 - moodledata Remote Session Disclosure
Moodle 1.5.2 - moodledata Remote Session Disclosure --/ INTRODUCTION -- / Advisory : MOODLE 2KB SESSION|O:6:"object":12:s:12:"sessiontest";s:10:"zN0PiMhwWK";s:8:"encoding"; s:10:"iso-8859-1";s:7:"fromurl";s:69:"http://www.TARGET.com/moodle/mod/forum/...
CVE-2004-2182
Session fixation vulnerability in Macromedia JRun 4.0 allows remote attackers to hijack user sessions by pre-setting the user session ID information used by the session server...
CVE-2004-0944
The web management interface for Mitel 3300 Integrated Communications Platform ICP before 4.2.2.11 generates easily predictable web session IDs, which allows remote attackers to hijack other sessions via the parentsessionid cookie...