Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP4 Session文件本地信息泄漏漏洞
Vulnerability Description
PHP是服务器端脚本语言，设计成内嵌于HTML文件的形式，可以运行于Windows， Linux和许多Unix操作系统。PHP在Web开发上使用非常广泛。 PHP session信息默认存放在/tmp目录下，这些文件的名字包含了session ID。例如，对于/tmp/sess_g35g5g54gg45wg85文件，"g35g5g54gg45wg85"就是其Session ID。一个本地攻击者可以浏览/tmp目录的内容来获取这些session ID，并可能劫持当前Web会话，获取未授权信息。
CVSS Information
N/A
Vulnerability Type
N/A