CVE-2008-6039

BLUEPAGE CMS <2.5 - Info Disclosure

Title source: llm
STIX 2.1

Description

Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by David Vieira-Kurz · textwebappsphp
https://www.exploit-db.com/exploits/32407

References (5)

Core 5
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31968
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/45323
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/496582/100/0/threaded
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/31315

Scores

EPSS 0.0103
EPSS Percentile 77.4%

Details

CWE
CWE-287
Status published
Products (3)
bluepage/bluepage_cms 2.4.0
bluepage/bluepage_cms < 2.5
iss-oberlausitz/bluepage_cms < 2.5.8
Published Feb 03, 2009
Tracked Since Feb 18, 2026