Description

Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sessions by specifying a session ID.

Remediation

References

CVE-2011-4718

Related Vulnerabilities

Plone CMS Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-33509)

Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-26045)

WordPress Plugin Memphis Documents Library Arbitrary File Download (3.1.5)

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-8091)

Moodle Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-6970)

Severity

Medium

Classification

CVE-2011-4718 CWE-264

Tags

Missing Update Known Vulnerabilities