Description

Session fixation vulnerability in Special:UserLogin in MediaWiki before 1.18.6, 1.19.x before 1.19.3, and 1.20.x before 1.20.1 allows remote attackers to hijack web sessions via the session_id.

Remediation

References

CVE-2012-5391

Related Vulnerabilities

WordPress Plugin WooCommerce Affiliate-Coupon Affiliates Cross-Site Scripting (4.11.0.1)

WordPress Plugin Count per Day Cross-Site Request Forgery (3.2.5)

WordPress Plugin YITH WooCommerce Ajax Product Filter Cross-Site Scripting (3.11.0)

Ampache Other Vulnerability (CVE-2006-5668)

WordPress Plugin Metform Elementor Contact Form Builder-Flexible and Design-Friendly Contact Form builder for WordPress Cross-Site Scripting (3.1.2)

Severity

Medium

Classification

CVE-2012-5391

Tags

Missing Update Known Vulnerabilities