Description

Joomla! Core is prone to a session fixation vulnerability. An attacker may leverage this issue to hijack an arbitrary session and gain access to sensitive information, which may help in launching further attacks. Joomla! Core versions 1.5.x ranging from 1.5.0 and up to and including 1.5.15 are vulnerable.

Remediation

References

CVE-2010-1434

Related Vulnerabilities

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-31804)

WordPress Plugin Visual Form Builder Multiple Vulnerabilities (2.8.2)

Oracle Application Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2002-2347)

Ruby on Rails CVE-2021-22902 Vulnerability (CVE-2021-22902)

WordPress Plugin OpenID Connect Generic Client Cross-Site Scripting (3.8.1)

Severity

High

Classification

CVE-2010-1434 CWE-384 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities