/ 
CGI-Session-4.06
/ CGI::Session::ID::md5
Security Advisories (2)
CVE-2006-1279 (2006-03-19)

CGI::Session 4.03-1 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by (1) Driver::File, (2) Driver::db_file, and possibly (3) Driver::sqlite.

CPANSA-CGI-Session-2006-01 (2006-04-06)

possible SQL injection attack

NAME

CGI::Session::ID::md5 - default CGI::Session ID generator

SYNOPSIS

use CGI::Session;
$s = new CGI::Session("id:md5", undef);

DESCRIPTION

CGI::Session::ID::MD5 is to generate MD5 encoded hexadecimal random ids. The library does not require any arguments.

LICENSING

For support and licensing see CGI::Session