exploitDog

CVE-2008-6039

Опубликовано: 03 фев. 2009

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

Ссылки

http://secunia.com/advisories/31968
Not Applicable
http://www.majorsecurity.de/index_2.php?major_rls=major_rls53
Exploit
http://www.securityfocus.com/archive/1/496582/100/0/threaded
Broken Link
http://www.securityfocus.com/bid/31315
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/45323
Third Party Advisory
http://secunia.com/advisories/31968
Not Applicable
http://www.majorsecurity.de/index_2.php?major_rls=major_rls53
Exploit
http://www.securityfocus.com/archive/1/496582/100/0/threaded
Broken Link
http://www.securityfocus.com/bid/31315
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/45323
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:iss-oberlausitz:bluepage_cms:*:*:*:*:*:*:*:*

Версия до 2.5.8 (исключая)

EPSS

Процентиль: 80%

0.02062

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-5g8q-4hvv-f9qp

github

больше 4 лет назад

Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

EPSS

Процентиль: 80%

0.02062

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-287