CVE-2008-5964

Session fixation vulnerability in Social ImpressCMS before 1.1.1 RC1 allows remote attackers to hijack web sessions by setting the PHPSESSID parameter

published January 23, 2009

CVSS
—
EPSS
2%
Percentile
74.3
In the wild
Unconfirmed
What it is

Session fixation vulnerability in Social ImpressCMS before 1.1.1 RC1 allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01524 · 74.3th percentile
Published
2009-01-23T18:38Z
EPSS history
Timeline
  • 23 JAN 18:38Z
    Session fixation vulnerability in Social ImpressCMS before 1.1.1 RC1 allows remote attackers to hijack web sessions by setting the PHPSESSID parameter
    cvelistv5