CVE-2026-120223

A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function sessionget of the file session.lua of the component Session ID Handler. The manipulation of the argument user leads to insufficiently random values. The attack can be initiated remotely. The attack's...

CVE-2026-120223 Oray Pugongying X5 Pro Session ID session.lua session_get random values

A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function sessionget of the file session.lua of the component Session ID Handler. The manipulation of the argument user leads to insufficiently random values. The attack can be initiated remotely. The attack's...

CVE-2026-120223 Oray Pugongying X5 Pro Session ID session.lua session_get random values

A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function sessionget of the file session.lua of the component Session ID Handler. The manipulation of the argument user leads to insufficiently random values. The attack can be initiated remotely. The attack's...

CVE-2026-120223

A vulnerability exists in Oray Pugongying X5 Pro (up to version 7.6.1) within the Session ID Handler component. Specifically, the session_get function in the session.lua file is susceptible to the manipulation of the _user argument, which leads to the generation of insufficiently random values (C...

EUVD-2026-114809

A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function sessionget of the file session.lua of the component Session ID Handler. The manipulation of the argument user leads to insufficiently random values. The attack can be initiated remotely. The attack's...

CVE-2026-120223: Oray Pugongying X5 Pro: A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1

A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function sessionget of the file session.lua of the component Session ID Handler. The manipulation of the argument user leads to insufficiently random values. The attack can be initiated remotely. The attack's...

PT-2026-134886

A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function session get of the file session.lua of the component Session ID Handler. The manipulation of the argument user leads to insufficiently random values. The attack can be initiated remotely. The attack's...

CVE-2018-25052

A vulnerability has been found in Catalyst-Plugin-Session up to 0.40 and classified as problematic. This vulnerability affects the function loadsessionid of the file lib/Catalyst/Plugin/Session.pm of the component Session ID Handler. The manipulation of the argument sid leads to cross site...

UBUNTU-CVE-2018-25052

A vulnerability has been found in Catalyst-Plugin-Session up to 0.40 and classified as problematic. This vulnerability affects the function loadsessionid of the file lib/Catalyst/Plugin/Session.pm of the component Session ID Handler. The manipulation of the argument sid leads to cross site...

CVE-2018-25052

A vulnerability has been found in Catalyst-Plugin-Session up to 0.40 and classified as problematic. This vulnerability affects the function loadsessionid of the file lib/Catalyst/Plugin/Session.pm of the component Session ID Handler. The manipulation of the argument sid leads to cross site...

Cross site scripting

A vulnerability has been found in Catalyst-Plugin-Session up to 0.40 and classified as problematic. This vulnerability affects the function loadsessionid of the file lib/Catalyst/Plugin/Session.pm of the component Session ID Handler. The manipulation of the argument sid leads to cross site...

CVE-2018-25052

A vulnerability has been found in Catalyst-Plugin-Session up to 0.40 and classified as problematic. This vulnerability affects the function loadsessionid of the file lib/Catalyst/Plugin/Session.pm of the component Session ID Handler. The manipulation of the argument sid leads to cross site...

CVE-2018-25052 Catalyst-Plugin-Session Session ID Session.pm _load_sessionid cross site scripting

A vulnerability has been found in Catalyst-Plugin-Session up to 0.40 and classified as problematic. This vulnerability affects the function loadsessionid of the file lib/Catalyst/Plugin/Session.pm of the component Session ID Handler. The manipulation of the argument sid leads to cross site...

CVE-2018-25052

A vulnerability has been found in Catalyst-Plugin-Session up to 0.40 and classified as problematic. This vulnerability affects the function loadsessionid of the file lib/Catalyst/Plugin/Session.pm of the component Session ID Handler. The manipulation of the argument sid leads to cross site...

CVE-2018-25052: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in Catalyst-Plugin-Session up to 0.40 and classified as problematic. This vulnerability affects the function loadsessionid of the file lib/Catalyst/Plugin/Session.pm of the component Session ID Handler. The manipulation of the argument sid leads to cross site...