Vulnerability in Php

CVE-2011-4718

Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sessions by specifying a session ID.

EPSS: 0.036 (88.3th percentile) — read the EPSS interpretation.

Affected products

  • Php — versions 5.0.0, 5.0.1, 5.0.2
  • N/a — versions n/a

Weakness classification (CWE)

References