Lucene search

MitreCVE-2007-1951

HistoryApr 11, 2007 - 1:19 a.m.

CVE-2007-1951

2007-04-1101:19:00

CWE-287

mitre

web.nvd.nist.gov

cve

2007

1951

session fixation

onelook obo shop

vulnerability

remote attackers

hijack

web sessions

phpsessid cookie

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.6

Confidence

Low

EPSS

0.011

Percentile

84.7%

JSON

Session fixation vulnerability in onelook obo Shop allows remote attackers to hijack web sessions by setting a PHPSESSID cookie.

Affected configurations

Nvd

Node

onelookoboshop

VendorProductVersionCPE
onelookoboshop*cpe:2.3:a:onelook:oboshop:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
onelook	oboshop	*	cpe:2.3:a:onelook:oboshop::::::::

References

www.majorsecurity.de/index_2.php?major_rls=major_rls40

www.securityfocus.com/archive/1/464886/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/33500

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.6

Confidence

Low

EPSS

0.011

Percentile

84.7%

JSON

Related for CVE-2007-1951