Description

Session fixation vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to gain privileges by tricking a user to click on a URL that fixes the session identifier.

Remediation

References

CVE-2006-1228

Related Vulnerabilities

LimeSurvey CVE-2019-16176 Vulnerability (CVE-2019-16176)

Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2026-48743)

WordPress Plugin YITH WooCommerce Product Bundles Security Bypass (1.1.15)

WordPress Plugin Newsletter-Send awesome emails from WordPress Unspecified Vulnerability (4.1.1)

WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2025-21535)

Severity

Medium

Classification

CVE-2006-1228 CWE-287

Tags

Missing Update Known Vulnerabilities