Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:

bugtraq logo Bugtraq mailing list archives

Re: Joomla: Session hijacking vulnerability, CVE-2008-4122
From: darkz.gsa () gmail com
Date: Thu, 18 Dec 2008 04:40:40 -0700
Yes, I can reproduce this behavior. The application should reinitialize the cookie after the login but instead it will 
keep the previous cookie. An interesting thing this is valid only for the login_module, the administrator login page 
does not automatically redirect to HTTPS by configuration.

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]