| tiêu đề | kishor-23 food-waste-management-system food-waste-management-system Session Fixiation |
|---|
| Mô tả | None of the login flows call `session_regenerate_id()`: user login is handled by `login.php:2-24`/`signin.php:2-30`, admin login by `admin/signin.php:2-30`, and delivery login by `delivery/deliverylogin.php:2-31`. PHP 7.4's default `session.use_strict_mode` is off, so the server accepts an attacker-chosen PHPSESSID delivered through the victim's browser. After the victim authenticates with that pre-seeded ID, the ID is unchanged (verified: the PHPSESSID value before and after login was identical) and the attacker's copy of the ID now identifies a fully authenticated session. Effects: complete impersonation of the victim's donor/admin/delivery account. |
|---|
| Nguồn | ⚠️ https://github.com/kishor-23/food-waste-management-system/issues/16 |
|---|
| Người dùng | liaoxijun10086 (UID 101151) |
|---|
| Đệ trình | 11/09/2026 11:50 (cách đây 24 ngày) |
|---|
| Kiểm duyệt | 04/10/2026 15:58 (23 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 413433 [kishor-23 food-waste-management-system Login Flow login.php PHPSESSID xác thực yếu] |
|---|
| điểm | 20 |
|---|