CVE-2011-4718 in PHP
Summary
Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sessions by specifying a session ID.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
12/09/2011
Disclosure
08/13/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 9978 | PHP Sessions session_regenerate_id access control | 264 | Proof-of-Concept | Official fix | CVE-2011-4718 |