CVE-2007-3988

Description

Session fixation vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

Affected Platforms

Weakness Type

CWE-287

References

• http://secunia.com/advisories/26142
• http://securityreason.com/securityalert/2926
• http://www.majorsecurity.de/index_2.php?major_rls=major_rls51
• http://www.securityfocus.com/archive/1/474324/100/0/threaded
• http://www.securityfocus.com/bid/25006
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35548