Description

Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

Remediation

References

CVE-2008-4122

Related Vulnerabilities

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2019-9675)

WordPress Plugin Premium Addons for Elementor Cross-Site Scripting (3.7.2)

TYPO3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-4855)

Dotclear Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3783)

WordPress Plugin WordPress Poll Cross-Site Request Forgery (34.05)

Severity

Medium

Classification

CVE-2008-4122

Tags

Missing Update Known Vulnerabilities