CVE-2007-1949 Session fixation vulnerability in WebBlizzard CMS allows remote attackers to hijack web sessions by setting a PHPSESSID cookie.
HighCVSS 7.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Session fixation vulnerability in WebBlizzard CMS allows remote attackers to hijack web sessions by setting a PHPSESSID cookie.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webblizzard content management system | All versions | No fix listed |
References
- 2557 third-party-advisory
- www.majorsecurity.de vendor-advisory
- 20070407 [MajorSecurity Advisory #42]webblizzard CMS - Cross Site Scripting and Session fixation Issues mailing-list
- webblizzardcms-cookie-session-hijack(33499) vdb-entry