Description
Session fixation vulnerability in phpFreeChat 1.1 allows remote authenticated users to hijack web sessions by setting the session_id parameter to match the victim's nickid parameter.
References
- 31283 third-party-advisory
- phpfreechat-nickid-weak-security(44116) vdb-entry
- 30462 vdb-entry
- http://www.phpfreechat.net/changelog/1.2