CVE-2008-6599 | BDVDB-2026-35912 Detail

Description#

cookiecheck.php in CookieCheck 1.0 stores tmp/cc_sessions under the web root with insufficient access control, which allows remote attackers to obtain session data via a direct request related to the "default session save path."

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://code.google.com/p/cookiecheck/
http://code.google.com/p/cookiecheck/source/browse/patches/cookiecheck-1.0-security-fix-1.patch?spec=svn11&r=11
https://exchange.xforce.ibmcloud.com/vulnerabilities/49827
http://osvdb.org/48865

Exploit#

No public exploit known

History#

Version 12009-04-03Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.