Security Advisories (2)
CVE-2006-1279 (2006-03-19)

CGI::Session 4.03-1 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by (1) Driver::File, (2) Driver::db_file, and possibly (3) Driver::sqlite.

CPANSA-CGI-Session-2006-01 (2006-04-06)

possible SQL injection attack

NAME

CGI::Session::MD5 - provides default generate_id() method for CGI::Session

SYNOPSIS

my $session_id = $self->generate_id()

DESCRIPTION

You normaly do not have to use it. It will be called by CGI::Session whenever a new session identifier is required. But if you want, you can override the default generate_id(). ( see developer section of the CGI::Session manual)

AUTHOR

Sherzod B. Ruzmetov <sherzodr@cpan.org>

COPYRIGHT

This library is a free software. You can modify and/or redistribute it
under the same terms as Perl itself

SEE ALSO

CGI::Session, CGI::Session::File, CGI::Sessino::DB_File, CGI::Session::MySQL