Re: [MajorSecurity Advisory #47]Simple Machines Forum (SMF) - Session fixation Issue

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: [MajorSecurity Advisory #47]Simple Machines Forum (SMF) - Session fixation Issue
From: nobody@xxxxxxxxxx
Date: 14 Jun 2007 21:05:55 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

This is only possible if "session.use_transid" is enabled in the php.ini