CVE-2008-6039

BLUEPAGE CMS <2.5 - Info Disclosure

Title source: llm

Description

Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by David Vieira-Kurz · textwebappsphp
https://www.exploit-db.com/exploits/32407

References (5)

Scores

EPSS 0.0080
EPSS Percentile 73.7%

Classification

CWE
CWE-287
Status draft

Affected Products (2)

bluepage/bluepage_cms < 2.5
bluepage/bluepage_cms

Timeline

Published Feb 03, 2009
Tracked Since Feb 18, 2026