← Database

CVE-2008-5964

MEDIUM CVSS: 6.8 Published: 2009-01-23 Modified: 2026-06-16

Description

Session fixation vulnerability in Social ImpressCMS before 1.1.1 RC1 allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

Affected Platforms

Impresscms Impresscms

Weakness Type

CWE-287

References