Bugtraq: PHP Trans SID XSS (Was: New php release with security fixes)

Nmap Security Scanner

Intro

Ref Guide

Install Guide

Download

Changelog

Book

Docs
Security Lists

Bugtraq

Basics

More
Security Tools

More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:

Bugtraq mailing list archives

PHP Trans SID XSS (Was: New php release with security fixes)

From: "Sverre H. Huseby" <shh () thathost com>
Date: Fri, 30 May 2003 14:41:53 +0200

It also fixes the following, which wasn't mentioned in the summary (or
elsewhere, as far as I can see):

  "Cross-site Scripting in PHP's Transparent Session ID Support"
   http://shh.thathost.com/secadv/2003-05-11-php.txt


Sverre.

-- 
shh () thathost com
http://shh.thathost.com/

By Date By Thread

Current thread:

PHP Trans SID XSS (Was: New php release with security fixes) Sverre H. Huseby (Jun 01)