exploitDog

GHSA-wq8f-5m2c-qq4c

Опубликовано: 01 мая 2022

Источник: github

Github: Не прошло ревью

Описание

Session fixation vulnerability in Calimero.CMS 3.3.1232 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

Session fixation vulnerability in Calimero.CMS 3.3.1232 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2007-3053
https://exchange.xforce.ibmcloud.com/vulnerabilities/34685
http://osvdb.org/36984
http://secunia.com/advisories/25521
http://www.majorsecurity.de/index_2.php?major_rls=major_rls49
http://www.securityfocus.com/archive/1/470272/100/0/threaded

EPSS

Процентиль: 71%

0.01402

Низкий

CVE ID

Связанные уязвимости

CVE-2007-3053

nvd

больше 19 лет назад

Session fixation vulnerability in Calimero.CMS 3.3.1232 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

EPSS

Процентиль: 71%

0.01402

Низкий

CVE ID