Skip to content

CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2007-1966

Session fixation vulnerability in eXV2 CMS 2.0.4.3 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID cookie.

Read JSON ↗CVE.org ↗

Status: Published
Published: 2007-04-11
Updated: 2025-04-03
Assigning organization: mitre

Description

Session fixation vulnerability in eXV2 CMS 2.0.4.3 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID cookie.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a n/a

n/aaffected

References