CVE-2007-1952

Onelook Onebyone Cms - Authentication Bypass

Title source: rule

Description

Session fixation vulnerability in onelook onebyone CMS allows remote attackers to hijack web sessions by setting a PHPSESSID cookie.

References (4)

Scores

EPSS 0.0077
EPSS Percentile 73.4%

Classification

CWE
CWE-287
Status draft

Affected Products (1)

onelook/onebyone_cms

Timeline

Published Apr 11, 2007
Tracked Since Feb 18, 2026