Unscored CVE-2007-2546 EUVD-2007-2539GHSA-9q22-r645-j34j

Session fixation vulnerability in Simple Machines Forum (SMF) 1.1.2 and earlier allows remote attackers to hijack web sessions by setting t…

Published May 9, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Session fixation vulnerability in Simple Machines Forum (SMF) 1.1.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

References

25139 third-party-advisory
20070614 Re: [MajorSecurity Advisory #47]Simple Machines Forum (SMF) - Session fixation Issue mailing-list
35705 vdb-entry
http://www.majorsecurity.de/index_2.php?major_rls=major_rls47
20070505 [MajorSecurity Advisory #47]Simple Machines Forum (SMF) - Session fixation Issue mailing-list
2676 third-party-advisory
24482 vdb-entry