CRITICAL 9.1 CVE-2024-34324 Published 13 Oct 2026

ProPhoenix Law RMS Session Hijacking Vulnerability

Worried this affects your website?

An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack.

The attack is performed by injecting a crafted 24-character string into the ASP.NET_SessionId cookie.