A AegiFlow
LOWCVSS 2.1

CVE-2002-0121

CVE-2002-0121 updated by NVD

Modified
2026-09-20
Sources
nvd

Summary

PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections.

Affected packages

EcosystemPackageAffected versionsFixed versions
PHPphp[object Object], [object Object], [object Object], [object Object], [object Object]—

References

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.