CVE-2007-1966

CRITICAL CVSS: 9.1 Published: 2007-04-11 Modified: 2026-06-16

Description

Session fixation vulnerability in eXV2 CMS 2.0.4.3 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID cookie.

Affected Platforms

Exv2 Content Management System

Weakness Type

CWE-287, CWE-287

References