Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor The Php Group Subscribe
Filtered by product Pear Html Quickform Controller
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-4731 1 The Php Group 1 Pear Html Quickform Controller 2008-09-05 5.0 MEDIUM N/A
The Next action in PEAR HTML_QuickForm_Controller 1.0.4 includes the SID in the URL even when session.use_only_cookies is configured, which allows remote attackers to obtain the SID via an HTTP Referer field and possibly other vectors.