Unscored CVE-2007-2277 EUVD-2007-2272GHSA-3cp2-4fv4-fx43

Session fixation vulnerability in Plogger allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

Published Apr 25, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Session fixation vulnerability in Plogger allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

References

plogger-phpsessid-weak-security(33863) vdb-entry
http://www.majorsecurity.de/index_2.php?major_rls=major_rls46
20070424 [MajorSecurity Advisory #46]Plogger - Session fixation Issue mailing-list
2614 third-party-advisory