osCommerce 'oscid' Session Fixation Vulnerability
BID:34348
Info
osCommerce 'oscid' Session Fixation Vulnerability
| Bugtraq ID: | 34348 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 02 2009 12:00AM |
| Updated: | Apr 15 2009 07:26PM |
| Credit: | [email protected] |
| Vulnerable: |
osCommerce osCommerce 2.2 ms3 osCommerce osCommerce 2.2 ms2 060817 Update osCommerce osCommerce 2.2 ms2 05113 update osCommerce osCommerce 2.2 ms2 05112 update osCommerce osCommerce 2.2 ms2 osCommerce osCommerce 2.2 ms1 osCommerce osCommerce 2.2 cvs osCommerce osCommerce 3.0a5 osCommerce osCommerce 3.0a3 osCommerce osCommerce 2.2RC 2a osCommerce osCommerce 2.2 rc1 |
| Not Vulnerable: | |
Discussion
osCommerce 'oscid' Session Fixation Vulnerability
osCommerce is prone to a session-fixation vulnerability.
Attackers can exploit this issue to hijack a user's session and gain unauthorized access to the affected application.
The following are vulnerable:
osCommerce 2.2
osCommerce 3.0 Beta
Other versions may also be affected.
osCommerce is prone to a session-fixation vulnerability.
Attackers can exploit this issue to hijack a user's session and gain unauthorized access to the affected application.
The following are vulnerable:
osCommerce 2.2
osCommerce 3.0 Beta
Other versions may also be affected.
Exploit / POC
osCommerce 'oscid' Session Fixation Vulnerability
An attacker can exploit this issue by enticing an unsuspecting victim into following a malicious URI.
The following example URI is available:
http://www.example.com/myapp/index.php?oscid=arbitrarysession
An attacker can exploit this issue by enticing an unsuspecting victim into following a malicious URI.
The following example URI is available:
http://www.example.com/myapp/index.php?oscid=arbitrarysession
Solution / Fix
osCommerce 'oscid' Session Fixation Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
osCommerce 'oscid' Session Fixation Vulnerability
References:
References: