4241 matches found
Fedora Update for gdm FEDORA-2007-653
Check for the Version of gdm OpenVAS Vulnerability Test Fedora Update for gdm FEDORA-2007-653 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of th...
CVE-2008-6131
Session fixation vulnerability in moziloWiki 1.0.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
CVE-2008-6128
Session fixation vulnerability in moziloCMS 1.10.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
Session fixation
Session fixation vulnerability in moziloWiki 1.0.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
Session fixation
Session fixation vulnerability in moziloCMS 1.10.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
CVE-2008-6128
Session fixation vulnerability in moziloCMS 1.10.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
CVE-2008-6131
Session fixation vulnerability in moziloWiki 1.0.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
CVE-2008-6131
This CVE affects moziloWiki 1.0.1 and earlier, where a flaw in session handling allows remote attackers to hijack sessions by supplying a PHPSESSID parameter. The underlying issue is a session fixation vulnerability that can enable user session takeover. No explicit remediation or patch details a...
CVE-2008-6128
CVE-2008-6128 is a session-fixation vulnerability in moziloCMS 1.10.2 and earlier that allows an attacker to hijack user sessions by supplying a PHPSESSID value. The connected documents corroborate the same description across NVD and CVE listings, confirming the affected product and the root caus...
CVE-2008-6045
Session fixation vulnerability in shoppingcart.php in xt:Commerce 3.0.4 and earlier allows remote attackers to hijack web sessions by setting the XTCsid parameter...
CVE-2008-6039
Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
Session fixation
Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
Session fixation
Session fixation vulnerability in shoppingcart.php in xt:Commerce 3.0.4 and earlier allows remote attackers to hijack web sessions by setting the XTCsid parameter...
CVE-2008-6045
The CVE-2008-6045 entry concerns a session fixation flaw in xt:Commerce versions 3.0.4 and earlier, specifically in shopping_cart.php where an attacker can set the XTCsid parameter to hijack a user session. Affected component is the shopping_cart.php logic within xt:Commerce 3.0.4 and earlier. Im...
CVE-2008-6045
Session fixation vulnerability in shoppingcart.php in xt:Commerce 3.0.4 and earlier allows remote attackers to hijack web sessions by setting the XTCsid parameter...
TYPO3多个远程安全漏洞
BUGTRAQ ID: 33376 Typo3是开源内容管理系统(CMS)和内容管理框架(CMF)。 Typo3的实现上存在多个远程安全漏洞,可能导致用户控制Typo3或运行其上的操作系统。包括: 1. 创建弱的加密密钥 2. 认证绕过 3. 不安全的会话管理 4. 跨站脚本执行 5. 远程命令执行 TYPO3版本低于4.0.10、4.1.8、4.2.4的软件受漏洞影响。 TYPO3 TYPO3 ----- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://typo3.org/...
CVE-2008-5964
Session fixation vulnerability in Social ImpressCMS before 1.1.1 RC1 allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
Session fixation
Session fixation vulnerability in Social ImpressCMS before 1.1.1 RC1 allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
CVE-2008-5964
CVE-2008-5964 affects Social ImpressCMS prior to 1.1.1 RC1. There is a session fixation flaw: an attacker can set the PHPSESSID to hijack a web session. Impact as described: confidentiality, integrity, and availability can be partially affected; no exploitation details are provided. Remediation p...
CVE-2009-0256
Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hijack web sessions via unspecified vectors related to 1 frontend and 2 backend authentication...