Description

Session fixation vulnerability in CubeCart before 5.2.9 allows remote attackers to hijack web sessions via the PHPSESSID parameter.

Remediation

References

CVE-2014-2341

Related Vulnerabilities

WordPress Plugin Image Gallery-Responsive Photo Gallery Cross-Site Scripting (1.7.0)

Oracle JRE CVE-2013-1487 Vulnerability (CVE-2013-1487)

Atlassian Jira Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-13391)

axios Improper Input Validation Vulnerability (CVE-2019-10742)

WordPress Plugin Qiniu Uploader Cross-Site Scripting (0.1)

Severity

Medium

Classification

CVE-2014-2341 CWE-287

Tags

Missing Update Known Vulnerabilities