Unscored CVE-2007-2555 EUVD-2007-2548GHSA-gjqq-f3mg-pp9x

Unspecified vulnerability in Default.aspx in Podium CMS allows remote attackers to have an unknown impact, possibly session fixation, via a…

Published May 9, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Unspecified vulnerability in Default.aspx in Podium CMS allows remote attackers to have an unknown impact, possibly session fixation, via a META HTTP-EQUIV Set-cookie expression in the id parameter, related to "cookie manipulation." NOTE: this issue might be cross-site scripting (XSS).

References

20070509 Re: Podium CMS - Cookie Manipulation Exploit mailing-list
2664 third-party-advisory
20070505 Podium CMS - Cookie Manipulation Exploit mailing-list
36182 vdb-entry