Tirreno
Monthly
Session fixation in tirreno versions prior to 0.10.0 allows an attacker who can inject a known session identifier into a victim's browser to hijack that victim's authenticated session. The framework's authentication flow validates credentials and establishes a session but omits the PHP session_regenerate_id() call, so the same token that existed before login remains valid after it. No public exploit code has been identified; exploitation requires a prerequisite attack capability such as network man-in-the-middle access, a companion cross-site scripting flaw, or subdomain cookie injection.
SQL Injection vulnerability exists in Tirreno v0.9.5, specifically in the /admin/loadUsers API endpoint. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Session fixation in tirreno versions prior to 0.10.0 allows an attacker who can inject a known session identifier into a victim's browser to hijack that victim's authenticated session. The framework's authentication flow validates credentials and establishes a session but omits the PHP session_regenerate_id() call, so the same token that existed before login remains valid after it. No public exploit code has been identified; exploitation requires a prerequisite attack capability such as network man-in-the-middle access, a companion cross-site scripting flaw, or subdomain cookie injection.
SQL Injection vulnerability exists in Tirreno v0.9.5, specifically in the /admin/loadUsers API endpoint. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.