CVE-2012-1248

The CVE affects baserCMS 1.6.15 and earlier, where the vulnerability resides in app/config/core.php. In shared-hosting environments, installations may not be properly segregated, enabling an attacker with admin access on one domain to hijack sessions on another domain. This is a session managemen...