Re: Strict session?
| From: | Yasuo Ohgaki | Date: | Fri, 02 Dec 2011 09:40:23 +0000 |
| Subject: | Re: Strict session? | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 12 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-56719@lists.php.net to get a copy of this message | ||
Hi all,
I haven't mentioned, but I'll file CVE for this because this is
exploitable venerability. Unless it is filed by CVE, not many people
would know the risk of adoption/fixation. There may be the entry for
this, though.
Regards,
--
Yasuo Ohgaki
yohgaki@ohgaki.net