CVE-2019-7747

DbNinja 3.2.7 allows session fixation via the data.php sessid parameter.

mitre·CWE-384·Published 2019-02-11

CVSS

—

EPSS

0.01

KEV

Exploits

cve.orgen

72 chars

DbNinja 3.2.7 allows session fixation via the data.php sessid parameter.

NVDen

72 chars

DbNinja 3.2.7 allows session fixation via the data.php sessid parameter.

NVDes

87 chars

DbNinja 3.2.7 permite la fijación de sesiones mediante el parámetro sessid en data.php.

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P
3.0	Primary	NVD	9.6	2.8	6.0	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H