VHCS PHPSessionID Session Fixation Vulnerability
BID:25006
Info
VHCS PHPSessionID Session Fixation Vulnerability
| Bugtraq ID: | 25006 |
| Class: | Design Error |
| CVE: |
CVE-2007-3988 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 23 2007 12:00AM |
| Updated: | May 07 2015 05:36PM |
| Credit: | David Vieira-Kurz is credited with the discovery of this vulnerability. |
| Vulnerable: |
VHCS VHCS 2.4.7.1 |
| Not Vulnerable: | |
Discussion
VHCS PHPSessionID Session Fixation Vulnerability
VHCS is prone to a session-fixation vulnerability.
An attacker can exploit this issue to gain unauthorized access to the affected application.
This issue affects VHCS 2.4.7.1; other versions may also be affected.
VHCS is prone to a session-fixation vulnerability.
An attacker can exploit this issue to gain unauthorized access to the affected application.
This issue affects VHCS 2.4.7.1; other versions may also be affected.
Exploit / POC
VHCS PHPSessionID Session Fixation Vulnerability
To exploit this issue, an attacker must entice an unsuspecting user to follow a malicious URI.
To exploit this issue, an attacker must entice an unsuspecting user to follow a malicious URI.
Solution / Fix
VHCS PHPSessionID Session Fixation Vulnerability
Solution:
Currently we are not aware of any vendor fixes for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor fixes for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].