CVE-2008-4649

Session fixation vulnerability in Elxis CMS 2008.1 revision 2204 allows remote attackers to hijack web sessions by setting the PHPSESSID parameter

published October 21, 2008

CVSS
—
EPSS
2%
Percentile
84.2
In the wild
Unconfirmed
What it is

Session fixation vulnerability in Elxis CMS 2008.1 revision 2204 allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02449 · 84.2th percentile
Published
2008-10-21T22:00Z
EPSS history
Timeline
  • 21 OCT 22:00Z
    Session fixation vulnerability in Elxis CMS 2008.1 revision 2204 allows remote attackers to hijack web sessions by setting the PHPSESSID parameter
    cvelistv5