Description
Session fixation vulnerability in eggblog 3.1.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.
References
- 20070529 [MajorSecurity Advisory #48]eggblog - Session fixation Issue mailing-list
- http://www.majorsecurity.de/index_2.php?major_rls=major_rls48
- 25443 third-party-advisory
- eggblog-phpsessid-session-hijacking(34549) vdb-entry
- 36734 vdb-entry
- 2756 third-party-advisory