CVE-2006-3016

CVE-2006-3016 is a PHP vulnerability in the session handling code (session.c) that could allow a remote attacker to trigger a cross-site scripting or HTTP response splitting attack by supplying a crafted session identifier. The issue is associated with using non-alphanumeric session names and is ...