medium5.4
CVE-2013-3636
ProjectPier 0.8.8 has a Remote Information Disclosure Weakness because of the lack of the HttpOnly cookie flag
Impact
ProjectPier 0.8.8 has a Remote Information Disclosure Weakness because of the lack of the HttpOnly cookie flag
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Projectpier | Projectpier | Version 0.8.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/122341/Project-Pier-0.8.8-XSS-Insecure-Cookies.html
- http://www.securityfocus.com/bid/60739
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85609
- http://packetstormsecurity.com/files/122341/Project-Pier-0.8.8-XSS-Insecure-Cookies.html
- http://www.securityfocus.com/bid/60739
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85609