CVE

Id
36081  
CVE No.
CVE-2008-5964  
Status
Candidate  
Description
Session fixation vulnerability in Social ImpressCMS before 1.1.1 RC1 allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.  
Phase
Assigned (20090123)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
395866 36081 CVE-2008-5964 BUGTRAQ:20081127 [HACKATTACK Advisory 20081127]Social Impress CMS 1.1 - Session Fixation  View
395867 36081 CVE-2008-5964 URL:http://www.securityfocus.com/archive/1/archive/1/498734/100/0/threaded  View
395868 36081 CVE-2008-5964 BUGTRAQ:20081203 Re: [HACKATTACK Advisory 20081127]Social Impress CMS 1.1 - Session Fixation  View
395869 36081 CVE-2008-5964 URL:http://www.securityfocus.com/archive/1/archive/1/498885/100/0/threaded  View
395870 36081 CVE-2008-5964 CONFIRM:http://sourceforge.net/forum/forum.php?forum_id=893767  View
395871 36081 CVE-2008-5964 CONFIRM:http://wiki.impresscms.org/index.php?title=Change_Log#2008-12-2_:_1.1.1_RC  View
395872 36081 CVE-2008-5964 BID:32495  View
395873 36081 CVE-2008-5964 URL:http://www.securityfocus.com/bid/32495  View
395874 36081 CVE-2008-5964 OSVDB:50413  View
395875 36081 CVE-2008-5964 URL:http://osvdb.org/50413  View
395876 36081 CVE-2008-5964 SECUNIA:32985  View
395877 36081 CVE-2008-5964 URL:http://secunia.com/advisories/32985  View
395878 36081 CVE-2008-5964 XF:impresscms-phpsessid-session-hijacking(46989)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44330 JVNDB-2009-005337 PHP iCalendar の print.php におけるディレクトリトラバーサルの脆弱性 PHP iCalendar の print.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-5968 36081 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005337.html  View