CVE-2008-6128

MEDIUM CVSS: 6.8 Published: 2009-02-13 Modified: 2026-06-16

Description

Session fixation vulnerability in moziloCMS 1.10.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

Affected Platforms

Mozilo Mozilocms

Weakness Type

CWE-287

References