CVE-2024-34324: ProPhoenix Law RMS vulnerability
Published Oct 13, 2026
·Updated
An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack via injecting a crafted 24-character string into the ASP.NETSessionId cookie.
Affected Software
1 affected component
ProPhoenix Law RMS=2022.2403.3.101
Event History
Oct 13, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:17 PM
Description
Frequently Asked Questions
1
What must an attacker provide to exploit this issue?
The attacker must inject a crafted 24-character value into the ASP.NET_SessionId cookie.
2
What is the impact of a successful exploit?
A successful exploit enables session hijacking.