Description

Session fixation vulnerability in Special:UserLogin in MediaWiki before 1.18.6, 1.19.x before 1.19.3, and 1.20.x before 1.20.1 allows remote attackers to hijack web sessions via the session_id.

Remediation

References

CVE-2012-5391

Related Vulnerabilities

WordPress Plugin BuddyPress Security Bypass (2.3.4)

PHP-Fusion Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-1918)

PrestaShop Incorrect Authorization Vulnerability (CVE-2020-5279)

WordPress Plugin Yoast SEO SQL Injection (1.7.3.3)

Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-5230)

Severity

Medium

Classification

CVE-2012-5391

Tags

Missing Update Known Vulnerabilities