[BT_751]

HI,
Guys I scan the web site using vega and i get a high alert :
"Session Cookie Without Secure Flag "
I find in the case of "Resource Content":PHPSESSID=uon2cjp6uhl0dq6hrsqjo6la83; path=/

Please help me to know how can i benefit from it?

And thank you

[Triops]

As far as I know the only way that could be a benefit to you is if you managed to get the PHPSESSID cookie from another user, say the admin, while they are logged in. That'd allow you to access their account on the website.

[0xB9]

I answered your question in your first post here... What else is it you're trying to understand?