medium6.4Public exploit code
CVE-2007-6470
phpRPG 0.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read session ID values in files u…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- phpRPG 0.8 - '/tmp' Directory PHPSESSID Cookie Session Hijacking2007-12-15 · webapps · php · Verified
Impact
phpRPG 0.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read session ID values in files under tmp/, and then hijack sessions via PHPSESSID cookies.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phprpg | Phprpg | Version 0.8 |