Description
Session fixation vulnerability in Drupal 5.x before 5.9 and 6.x before 6.3, when contributed modules "terminate the current request during a login event," allows remote attackers to hijack web sessions via unknown vectors.
Remediation
References
Related Vulnerabilities
WordPress Plugin We�re Open! Cross-Site Scripting (1.41)
WebLogic Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2019-17195)
Oracle Application Server Other Vulnerability (CVE-2007-0289)
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2019-17531)
WordPress Plugin WooCommerce Possible Remote Code Execution (3.5.0)