Unscored CVE-2007-1949 EUVD-2007-1943GHSA-7355-p7pq-xxqv

Session fixation vulnerability in WebBlizzard CMS allows remote attackers to hijack web sessions by setting a PHPSESSID cookie.

Published Apr 11, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Session fixation vulnerability in WebBlizzard CMS allows remote attackers to hijack web sessions by setting a PHPSESSID cookie.

References

2557 third-party-advisory
http://www.majorsecurity.de/index_2.php?major_rls=major_rls42
20070407 [MajorSecurity Advisory #42]webblizzard CMS - Cross Site Scripting and Session fixation Issues mailing-list
webblizzardcms-cookie-session-hijack(33499) vdb-entry