CVE-2008-6128

MoziloCMS <1.10.2 - Info Disclosure

Title source: llm

Description

Session fixation vulnerability in moziloCMS 1.10.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

References (5)

[Various Sources] http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog

[Vendor Advisory] http://secunia.com/advisories/32021

[Various Sources] http://www.majorsecurity.de/index_2.php?major_rls=major_rls55

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/31495

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/45526

Scores

EPSS 0.0054

EPSS Percentile 67.1%

Classification

CWE

CWE-287

Status draft

Affected Products (20)

mozilo/mozilocms < 1.10.2

mozilo/mozilocms

mozilo/mozilocms

mozilo/mozilocms

mozilo/mozilocms

mozilo/mozilocms

mozilo/mozilocms

mozilo/mozilocms

mozilo/mozilocms

mozilo/mozilocms

mozilo/mozilocms

mozilo/mozilocms

mozilo/mozilocms

mozilo/mozilocms

mozilo/mozilocms

... and 5 more

Timeline

Published Feb 13, 2009

Tracked Since Feb 18, 2026