CVE-2007-2978

Session fixation vulnerability in eggblog 3.1.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-2978

Session fixation vulnerability in eggblog 3.1.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-2978

CVE-2007-2978 describes a session fixation vulnerability in eggblog versions 3.1.0 and earlier, where remote attackers can hijack web sessions by manipulating the PHPSESSID parameter. Affected software: eggblog (versions up to 3.1.0 and earlier). Root cause: session identifier can be set by an at...

[MajorSecurity Advisory #48]eggblog - Session fixation Issue

MajorSecurity Advisory 48eggblog - Session fixation Issue Details ======= Product: eggblog Affected version: 3.1.0 and prior Remote-Exploit: yes Vendor-URL: http://www.eggblog.net Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz...

ACROS Security: Session Fixation Vulnerability in HP SIM 5.0

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2007-05-14-1 ------------------------------------------------------------------------- ASPR 2007-05-14-1: Session Fixation Vulnerability in HP SIM 5.0...

CVE-2007-2719

Session fixation vulnerability in HP Systems Insight Manager SIM 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie...

Session fixation

Session fixation vulnerability in HP Systems Insight Manager SIM 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie...

CVE-2007-2719

Session fixation vulnerability in HP Systems Insight Manager SIM 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie...

CVE-2007-2719

CVE-2007-2719 affects HP Systems Insight Manager (SIM) versions 4.2 and 5.0 SP4/SP5. The vulnerability is a session fixation flaw that allows remote attackers to hijack web sessions by setting the JSESSIONID cookie. Documented impact is complete confidentiality, integrity, and availability compro...

Cross site scripting

Unspecified vulnerability in Default.aspx in Podium CMS allows remote attackers to have an unknown impact, possibly session fixation, via a META HTTP-EQUIV Set-cookie expression in the id parameter, related to "cookie manipulation." NOTE: this issue might be cross-site scripting XSS...

CVE-2007-2555

Podium CMS (Default.aspx) CVE-2007-2555 is described across multiple sources as an unspecified vulnerability that could allow remote attackers to manipulate cookies via a META http-equiv Set-Cookie in the id parameter, with an uncertain impact (possibly session fixation) and a note that it may be...

CVE-2007-2546

Session fixation vulnerability in Simple Machines Forum SMF 1.1.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

Session fixation

Session fixation vulnerability in Simple Machines Forum SMF 1.1.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-2546

CVE-2007-2546 affects Simple Machines Forum (SMF) versions up to 1.1.2. The vulnerability is a session fixation flaw that lets an attacker hijack a user’s web session by manipulating the PHPSESSID parameter. The connected documents corroborate the issue in SMF 1.1.2 and earlier, with related entr...

CVE-2007-2546

Session fixation vulnerability in Simple Machines Forum SMF 1.1.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

[MajorSecurity Advisory #47]Simple Machines Forum (SMF) - Session fixation Issue

MajorSecurity Advisory 47Simple Machines Forum SMF - Session fixation Issue Details ======= Product: Simple Machines Forum SMF Affected version: 1.1.2 and prior Remote-Exploit: yes Vendor-URL: http://www.simplemachines.org Vendor-Status: informed Advisory-Status: published Credits ============...

Session fixation

Session fixation vulnerability in Plogger allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-2277

Session fixation vulnerability in Plogger allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-2277

Session fixation vulnerability in Plogger allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-2277

CVE-2007-2277 describes a session-fixation vulnerability in Plogger, where remote attackers can hijack web sessions by setting the PHPSESSID parameter. The vulnerability concerns the PHP session handling in Plogger and can result in partial confidentiality, integrity, and availability impacts as ...