487 matches found
CVE-2007-1966
The eXV2 CMS version 2.0.4.3 and earlier is affected by a session fixation vulnerability. This flaw allows remote attackers to hijack web sessions by setting the PHPSESSID cookie. The provided documents do not specify the exact root cause or remediation steps, and no exploitation details are avai...
CVE-2007-1966
Session fixation vulnerability in eXV2 CMS 2.0.4.3 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID cookie...
Session fixation
Session fixation vulnerability in onelook obo Shop allows remote attackers to hijack web sessions by setting a PHPSESSID cookie...
Session fixation
Session fixation vulnerability in WebBlizzard CMS allows remote attackers to hijack web sessions by setting a PHPSESSID cookie...
Session fixation
Session fixation vulnerability in onelook onebyone CMS allows remote attackers to hijack web sessions by setting a PHPSESSID cookie...
Session fixation
Session fixation vulnerability in onelook courts on-line allows remote attackers to hijack web sessions by setting a PHPSESSID cookie...
CVE-2007-1951
Session fixation vulnerability in onelook obo Shop allows remote attackers to hijack web sessions by setting a PHPSESSID cookie...
CVE-2007-1953
Session fixation vulnerability in onelook courts on-line allows remote attackers to hijack web sessions by setting a PHPSESSID cookie...
CVE-2007-1949
The CVE-2007-1949 entry describes a Session fixation vulnerability in WebBlizzard CMS where an attacker can hijack user sessions by setting a PHPSESSID cookie. The connected documents confirm the flaw affects WebBlizzard CMS and exposes session integrity risk, allowing remote exploitation via coo...
CVE-2007-1952
Session fixation vulnerability in onelook onebyone CMS allows remote attackers to hijack web sessions by setting a PHPSESSID cookie...
CVE-2007-1951
Session fixation vulnerability in onelook obo Shop allows remote attackers to hijack web sessions by setting a PHPSESSID cookie...
CVE-2007-1953
Session fixation vulnerability in onelook courts on-line allows remote attackers to hijack web sessions by setting a PHPSESSID cookie...
CVE-2007-1951
The CVE-2007-1951 entry concerns a session fixation vulnerability in the onelook obo Shop where an attacker can hijack sessions by setting a PHPSESSID cookie. Affected component: web application/session handling within onelook obo Shop. Root cause: improper handling of PHPSESSID cookies allowing ...
CVE-2007-1953
CVE-2007-1953 is a session fixation vulnerability described as allowing remote attackers to hijack web sessions by setting a PHPSESSID cookie in onelook courts online. The connected documents provide the description but do not include concrete technical details (affected version/component/root ca...
CVE-2007-1952
CVE-2007-1952 concerns the onelook onebyone CMS . The vulnerability is a session fixation flaw that allows remote attackers to hijack web sessions by setting a PHPSESSID cookie. The description explicitly ties the issue to session fixation via PHPSESSID, enabling partial confidentiality and integ...
CVE-2007-1949
Session fixation vulnerability in WebBlizzard CMS allows remote attackers to hijack web sessions by setting a PHPSESSID cookie...
CVE-2006-6276
Sun Java System Proxy Server versions prior to 20061130 are affected by an HTTP request smuggling vulnerability when used with Sun Java System Application Server or Sun Java System Web Server. Exploitation could bypass HTTP request filtering, enable web session hijacking, permit cross-site script...
CVE-2006-6276
HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting XSS, and poison web...
CVE-2006-6276: Inconsistent Interpretation of HTTP Requests
HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting XSS, and poison web...
msn-xss-galore.txt
Title: Hotmail/MSN Multiple cross site scripting XSS Author: Securma Massine MorX Security Research Team http://www.morx.org Original Advisory/Xploit : http://www.morx.org/msnxss.txt Vulnerability : Multiple cross site scripting XSS Severity: Medium/High Description : msn.com is suffers from...