← Database

CVE-2007-2546

MEDIUM CVSS: 6.8 Published: 2007-05-09 Modified: 2026-06-16

Description

Session fixation vulnerability in Simple Machines Forum (SMF) 1.1.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

Affected Platforms

Simple Machines Simple Machines Forum

Weakness Type

CWE-287

References