CVE-2005-4731

CVE-2005-4731 affects PEAR HTML_QuickForm_Controller 1.0.4 where the Next action includes the session ID in the URL despite session.use_only_cookies being configured. This enables an external attacker to obtain the SID via the HTTP Referer field and possibly other vectors, exposing partial confid...