mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
0xMarcio
e9a692de92
Thirty of thirty sampled returned 404: the service is gone, so all 942 links across 911 entries are permanently dead. 576 entries held nothing else and drop out of the search index rather than offering a reader a guaranteed miss.
864 B
864 B
CVE-2007-3799
Description
The session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from (1) PATH_INFO, (2) the session_id function, and (3) the session_start function, which are not encoded or filtered when the new session cookie is generated, a related issue to CVE-2006-0207.
POC
Reference
No PoCs from references.
Github
No PoCs found on GitHub currently.