CVE-2024-10158CWE-384

PHPGurukul Boat Booking System session_start session fixiation

Medium · published October 19, 2024

CVSS v4.0
6.9
EPSS
1%
Percentile
52.0
In the wild
Unconfirmed
What it is

A vulnerability classified as problematic has been found in PHPGurukul Boat Booking System 1.0. Affected is the function session_start. The manipulation leads to session fixiation. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00684 · 52.0th percentile
Weakness
CWE-384 · Session Fixation
Published
2024-10-19T23:00Z
EPSS history
Timeline
  • 19 OCT 23:00Z
    PHPGurukul Boat Booking System session_start session fixiation
    cvelistv5