CVE-2008-5575

Pro Clan Manager <0.4.2 - Info Disclosure

Title source: llm

Description

Session fixation vulnerability in Pro Clan Manager 0.4.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

References (4)

[Third Party Advisory] http://securityreason.com/securityalert/4752

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/47036

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/498864/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/32606

Scores

EPSS 0.0050

EPSS Percentile 65.5%

Classification

CWE

CWE-287

Status draft

Affected Products (6)

proclanmanager/pro_clan_manager

proclanmanager/pro_clan_manager < 0.4.2

proclanmanager/pro_clan_manager

Timeline

Published Dec 15, 2008

Tracked Since Feb 18, 2026