Description

Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sessions by specifying a session ID.

Remediation

References

CVE-2011-4718

Related Vulnerabilities

WordPress Plugin AddToAny Share Buttons Cross-Site Scripting (1.6.6)

WordPress Plugin SMTP by BestWebSoft Cross-Site Scripting (1.0.9)

MySQL Other Vulnerability (CVE-2004-0457)

WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.26)

MySQL CVE-2016-0647 Vulnerability (CVE-2016-0647)

Severity

Medium

Classification

CVE-2011-4718 CWE-264

Tags

Missing Update Known Vulnerabilities