CVE-2007-2555 Unspecified vulnerability in Default.aspx in Podium CMS allows remote attackers to have an unknown impact, possibly session fixation, via a META HTTP-EQUIV Set-cookie expression in the id parameter, r...
MediumCVSS 4.3
EPSS 0.99%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Default.aspx in Podium CMS allows remote attackers to have an unknown impact, possibly session fixation, via a META HTTP-EQUIV Set-cookie expression in the id parameter, related to "cookie manipulation." NOTE: this issue might be cross-site scripting (XSS).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| podium cms | All versions | No fix listed |
References
- 36182 vdb-entry
- 2664 third-party-advisory
- 20070505 Podium CMS - Cookie Manipulation Exploit mailing-list
- 20070509 Re: Podium CMS - Cookie Manipulation Exploit mailing-list