Description

Session fixation vulnerability in Special:UserLogin in MediaWiki before 1.18.6, 1.19.x before 1.19.3, and 1.20.x before 1.20.1 allows remote attackers to hijack web sessions via the session_id.

Remediation

References

CVE-2012-5391

Related Vulnerabilities

WordPress Plugin RSS Aggregator by Feedzy-Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator Cross-Site Request Forgery (3.4.2)

WordPress Plugin Help Desk & Knowledgebase Software PHP Object Injection (1.3.11)

WordPress Plugin FileBird-WordPress Media Library Folders & File Manager SQL Injection (4.7.3)

WordPress Plugin Real-Time Find and Replace Cross-Site Scripting (3.8)

MySQL CVE-2022-21482 Vulnerability (CVE-2022-21482)

Severity

Medium

Classification

CVE-2012-5391

Tags

Missing Update Known Vulnerabilities