CVE-2008-3428

CVE-2008-3428

EPSS 1.2%

Session fixation vulnerability in phpFreeChat 1.1 allows remote authenticated users to hijack web sessions by setting the session_id parameter to match the victim's nickid parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/31283 https://exchange.xforce.ibmcloud.com/vulnerabilities/44116 http://www.phpfreechat.net/changelog/1.2 http://www.securityfocus.com/bid/30462