Description

Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

Remediation

References

CVE-2008-4122

Related Vulnerabilities

WordPress 2.3.3 Directory Traversal Vulnerability (0.6.2 - 2.3.3)

Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-18671)

MySQL CVE-2021-2065 Vulnerability (CVE-2021-2065)

WordPress Plugin YaMaps for WordPress Cross-Site Scripting (0.6.25)

phpMyAdmin Improper Input Validation Vulnerability (CVE-2016-9860)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2008-4122