| Package | Affected versions | Patched versions |
|---|---|---|
| jrun | = 3.0= 3.1 |
Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. rewriting) when client browsers have cookies enabled, which allows remote attackers to obtain session IDs and hijack sessions via HTTP referrer fields or sniffing.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free