Session Fixation

codeigniter/framework is vulnerable to session fixation attacks. The vulnerability exists due to the assumption that session.usestrictmode which was the default behavior of PHP 5.x...

CVE-2018-12071

A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.usestrictmode in the Session Library was mishandled...