CVE-2008-2970

Multiple session fixation vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow remote attackers to hijack web sessions by…

published July 2, 2008

CVSS
—
EPSS
2%
Percentile
83.7
In the wild
Unconfirmed
What it is

Multiple session fixation vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow remote attackers to hijack web sessions by setting the PHPSESSID parameter to (1) index.php and (2) login.php in homepg/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02364 · 83.7th percentile
Published
2008-07-02T17:00Z
EPSS history
Timeline
  • 02 JUL 17:00Z
    Multiple session fixation vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow remote attackers to hijack web sessions by…
    cvelistv5