CVE-2008-6131

Session fixation vulnerability in moziloWiki 1.0.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

Link	Resource
http://wiki.mozilo.de/index.php?page=Changelog
http://secunia.com/advisories/32024	Vendor Advisory
http://www.majorsecurity.de/index_2.php?major_rls=major_rls56
http://marc.info/?l=bugtraq&m=122278832621348&w=2
http://www.securityfocus.com/bid/31493
https://exchange.xforce.ibmcloud.com/vulnerabilities/45528

Configuration 1

cpe:2.3:a:mozilo:mozilowiki:0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilo:mozilowiki:0.10:*:*:*:*:*:*:* cpe:2.3:a:mozilo:mozilowiki:0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilo:mozilowiki:1.0.0:*:*:*:*:*:*:* cpe:2.3:a:mozilo:mozilowiki:0.9:*:*:*:*:*:*:* cpe:2.3:a:mozilo:mozilowiki:*:*:*:*:*:*:*:*

---

Published : 2009-02-13 06:30

Updated : 2017-08-17 01:29

---

NVD link : CVE-2008-6131

Mitre link : CVE-2008-6131

No products.

CWE-287