PT-2019-18741

Name of the Vulnerable Software and Affected Versions DbNinja version 3.2.7 Description The issue allows session fixation via the sessid parameter in the "data.php" endpoint. Recommendations For DbNinja version 3.2.7, avoid using the sessid parameter in the "data.php" endpoint until the issue is...

IF-CMS 2.07 - Local File Inclusion (Metasploit) (2)

$Id: if-cms.rb 2011-03-15 20:28:10 tecr0c $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ -- coding:...

PT-2010-5394

Name of the Vulnerable Software and Affected Versions LiveZilla version 3.2.0.2 Description A cross-site scripting XSS issue exists in the lz tracking set sessid function, allowing remote attackers to inject arbitrary web script or HTML via the livezilla parameter in a track action to "server.php...

CVE-2009-3904: Undefined Security Weakness

classes/session/ccadminsession.php in CubeCart 4.3.4 does not properly restrict administrative access permissions, which allows remote attackers to bypass restrictions and gain administrative access via a HTTP request that contains an empty 1 sessID ccAdmin cookie, 2 XCLUSTERCLIENTIP header, or 3...

CVE-2006-5935: Undefined Security Weakness

SQL injection vulnerability in index.php in ShopSystems 4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the sessid parameter...

CVE-2006-0823: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to inject arbitrary SQL commands via the 1 userid variable to users.php or 2 sessid variable to lib-sessions.php...