Loading vulnerability database

CVE-2019-7747: Session Fixation | Rapid7 Vulnerability Database

CVE-2019-7747: Session Fixation

DbNinja 3.2.7 allows session fixation via the data.php sessid parameter.

CVSS Details

CVSS 3.1 Base Score: 9.6
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

CVE details

CVSS v4 ScoreN/A

CVSS v3 Score

9.6 Critical

EPSS Score0%

EPSS Percentile63%

In CISA KEV CatalogueFalse

Published

Feb 11, 2019

References

NVD ↗

The Command Platform

Respond faster and outpace attackers. Taking command of your attack surface starts here.

Explore platform

Capabilities

Attack Surface Management
Reveal & protect coverage gaps
Exposure Management
Identify & remediate at-risk data
Vulnerability Management
Pinpoint & eliminate risk
CyberGRC
Manage governance, risk & compliance

Next-Gen SIEM
Investigate with AI-driven detections
Threat Intelligence Platform
Recognize & mitigate adversaries
AI-Powered Security Operations
Automate & optimize workflows
Cloud-Native Application Protection
Discover & defend sensitive data
Application Security
Scan & simplify dev workflows

Explore the platform

Talk to an Expert
Product Tours
Customer Stories

MDR Services

Managed Detection and Response
Preemptive MDR that disrupts attackers
MDR for Microsoft
Maximize and protect your Microsoft investment
MDR for Enterprise
Get customized protection for enterprise systems
MDR ROI Calculator
See how MDR can boost your ROI

Rapid7 MDR vs. Competitors
Decide which solution fits

Exposure Management

Managed Vulnerability Management
Get help pinpointing exposures
Continuous Red Teaming
Get help validating exposures
Managed Application Security
Get help securing dev workflows
Penetration Testing Services
Get help with defense assessment

Intelligence

Rapid7 Intelligence tracks adversaries, shares proprietary, curated intelligence and research, and builds trusted open-source communities—all to help you improve your security program.

Explore Rapid7 Intelligence

Research and Intelligence

Latest Threat Research
Proprietary intelligence, research and adversary insights
Emergent Threat Response
Fast, expert analysis and security content for high-priority cyber threats

Tools and Services

Vulnerability & Exploit Database
Search thousands of CVEs
Metasploit
The world's most used penetration testing tool
Velociraptor
Endpoint monitoring, digital forensic and cyber response platform
Project Sonar
Improve security through the active analysis of public networks
Threat Intelligence Platform
Transform raw threat data into curated, high-fidelity intelligence

Threat Alert Center

Emergent Threat Response
Latest on the blog
Vulnerability & Exploit Database
Search thousands of CVEs

Learn

Blog
Webinars and Events
Resource Library
Cybersecurity Fundamentals

Product

Product Documentation
Product Release Notes
Product Extensions
Product Toolkits

Customer Support

Customer Support
Rapid7 Forum

Company

About Us
Leadership Team
Our Customers
Careers
Contact Us

Media

Newsroom
Awards and Recognition
Investors

In the community

Social Good
Culture
Boston Bruins Partnership

The Command Platform
Respond faster and outpace attackers. Taking command of your attack surface starts here.
Explore platform
Capabilities
Attack Surface Management
Reveal & protect coverage gaps
Exposure Management
Identify & remediate at-risk data
Vulnerability Management
Pinpoint & eliminate risk
CyberGRC
Manage governance, risk & compliance
Next-Gen SIEM
Investigate with AI-driven detections
Threat Intelligence Platform
Recognize & mitigate adversaries
AI-Powered Security Operations
Automate & optimize workflows
Cloud-Native Application Protection
Discover & defend sensitive data
Application Security
Scan & simplify dev workflows
Explore the platform
Talk to an Expert
Product Tours
Customer Stories
All Products
MDR Services
Managed Detection and Response
Preemptive MDR that disrupts attackers
MDR for Microsoft
Maximize and protect your Microsoft investment
MDR for Enterprise
Get customized protection for enterprise systems
MDR ROI Calculator
See how MDR can boost your ROI
Rapid7 MDR vs. Competitors
Decide which solution fits
Exposure Management
Managed Vulnerability Management
Get help pinpointing exposures
Continuous Red Teaming
Get help validating exposures
Managed Application Security
Get help securing dev workflows
Penetration Testing Services
Get help with defense assessment
All services
MDR Buyer's Guide
Find the best MDR partner for your business
READ NOW
Intelligence
Rapid7 Intelligence tracks adversaries, shares proprietary, curated intelligence and research, and builds trusted open-source communities—all to help you improve your security program.
Explore Rapid7 Intelligence
Research and Intelligence
Latest Threat Research
Proprietary intelligence, research and adversary insights
Emergent Threat Response
Fast, expert analysis and security content for high-priority cyber threats
Tools and Services
Vulnerability & Exploit Database
Search thousands of CVEs
Metasploit
The world's most used penetration testing tool
Velociraptor
Endpoint monitoring, digital forensic and cyber response platform
Project Sonar
Improve security through the active analysis of public networks
Threat Intelligence Platform
Transform raw threat data into curated, high-fidelity intelligence
Global Threat Landscape Report
Find out what is driving the shift in 2026.
Read now
Threat Alert Center
Emergent Threat Response
Latest on the blog
Vulnerability & Exploit Database
Search thousands of CVEs
Learn
Blog
Webinars and Events
Resource Library
Cybersecurity Fundamentals
Product
Product Documentation
Product Release Notes
Product Extensions
Product Toolkits
Customer Support
Customer Support
Rapid7 Forum
Company
About Us
Leadership Team
Our Customers
Careers
Contact Us
Media
Newsroom
Awards and Recognition
Investors
In the community
Social Good
Culture
Boston Bruins Partnership

Contact Get demo

Get Started

Command Platform

Exposure Management

Take Action

Take a Product Tour

Get Breach Support

Company

About Us

Leadership

Newsroom

Our Customers

Partner Programs

Investors

Careers

Stay Informed

Blog

Emergent Threat Response

Webinars & Events

Rapid7 Intelligence Research

Vulnerability Database

Security Fundamentals

For Customers

Sign In

Support Portal

Product Documentation

Extension Library

Rapid7 Academy

Customer Escalation Portal

Contact Support

+1-866-390-8113

Follow Us

© Rapid7

Legal Terms Privacy Policy Export Notice Trust Cookie List Accessibility Statement