Lucene search

[email protected]CVE-2007-3050

HistoryJun 06, 2007 - 1:30 a.m.

CVE-2007-3050

2007-06-0601:30:00

CWE-287

[email protected]

web.nvd.nist.gov

cve-2007-3050

session fixation

chameleon cms

web sessions

remote attackers

phpsessid parameter

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.6%

JSON

Session fixation vulnerability in chameleon cms 3.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

Affected configurations

NVD

Node

chameleon_cmschameleon_cmsRange≤3.0

CPENameOperatorVersion
chameleon_cms:chameleon_cmschameleon cmsle3.0

CPE	Name	Operator	Version
chameleon_cms:chameleon_cms	chameleon cms	le	3.0

References

osvdb.org/36912

secunia.com/advisories/25526

www.majorsecurity.de/index_2.php?major_rls=major_rls50

www.securityfocus.com/archive/1/470273/100/0/threaded

www.securityfocus.com/archive/1/470759/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/34684

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.6%

JSON

Related for CVE-2007-3050

prion1 cvelist1 nvd1