---
id: 2321
title: "Lame bugs for a rainy day"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/lame-bugs-for-a-rainy-day"
published_at: "2007-07-02T19:00:00Z"
tags: ["web-security", "penetration-testing", "reporting", "portswigger", "session-management", "vulnerability-chaining", "pen-testing", "low-severity"]
phying_url: "https://phying.com/item/2321"
lang: en
---

# Lame bugs for a rainy day

## Summary

Even tight apps yield 'lame' issues—informative errors, loose cookie scope, session fixation, directory listings. Stuttard says report them anyway: chained low-risk flaws can fully compromise an app.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2007-07-02T19:00:00Z
- **Original:** https://portswigger.net/blog/lame-bugs-for-a-rainy-day
- **Phying News:** https://phying.com/item/2321