CVE-2007-2555
Podium CMS - Session Fixation via META HTTP-EQUIV Set-cookie in Default.aspx
Title source: llmDescription
Unspecified vulnerability in Default.aspx in Podium CMS allows remote attackers to have an unknown impact, possibly session fixation, via a META HTTP-EQUIV Set-cookie expression in the id parameter, related to "cookie manipulation." NOTE: this issue might be cross-site scripting (XSS).
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/468058/100/0/threaded
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/2664
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/467823/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/36182
Scores
EPSS
0.0099
EPSS Percentile
58.1%
Details
CWE
CWE-287
Status
published
Products (1)
podium_cms/podium_cms
Published
May 09, 2007
Tracked Since
Feb 18, 2026