Description
An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack via injecting a crafted 24-character string into the ASP.NET_SessionId cookie.
Critical · 9.1
CVE-2024-34324
EUVD-2024-55794GHSA-pxwj-2qhx-j862
An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack via injecting a crafted 24-character…
Published Oct 13, 2026 · Updated Oct 14, 2026 · Assigned by mitre