Description

Session fixation vulnerability in ownCloud before 6.0.2, when PHP is configured to accept session parameters through a GET request, allows remote attackers to hijack web sessions via unspecified vectors.

Remediation

References

CVE-2014-2047

Related Vulnerabilities

WordPress Plugin Paid Downloads 'download_key' Parameter SQL Injection (2.01)

ZenCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-6985)

MySQL Resource Management Errors Vulnerability (CVE-2010-3836)

Plone CMS Cryptographic Issues Vulnerability (CVE-2012-6661)

WordPress Plugin WP Reroute Email Cross-Site Request Forgery (1.4.6)

Severity

Medium

Classification

CVE-2014-2047 CWE-287

Tags

Missing Update Known Vulnerabilities