CVE-2007-6546

CVE-2007-6546 affects RunCMS prior to 1.6.1. The issue is a predictable session ID that enables remote attackers to hijack a user session by modifying the session identifier. The available data states the vulnerability could allow such session hijacking, with a base severity of medium (CVSSv2 6.4...